2026

RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded 2026-05-12 at 20:12 By RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a “major malicious attack.” “We’re dealing with a major malicious attack on Ruby Gems right now,” Maciej Mensfeld, […]

New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots 2026-05-12 at 17:34 By Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting

Webinar: What the Riskiest SOC Alerts Go Unanswered – and How Radiant Security Can Help 2026-05-12 at 17:34 By Why do the Riskiest SOC Alerts Go Unanswered? Security operations teams are drowning in alerts. But the real problem isn’t always alert volume; it’s the blind spots. The most dangerous alerts are the ones no one

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages 2026-05-12 at 17:34 By TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign.

5 Ways To Keep AI In Check 2026-05-12 at 15:02 By Prateek Temkar How to protect productivity without slowing down innovation This article is an excerpt from SECURITY.COM View Original Source