SafeDep researchers identified a native Windows addon in the npm package imgdecode that activates when the library is loaded, downloads and decrypts content, and attempts to inject it into the dllhost.exe process.
Bitdefender described the Midnight Mimosa campaign, involving malware embedded in the firmware of some low-cost, multi-brand Android devices using the MediaTek platform.
A Checkmarx analysis uncovered the indexed-btree npm package, which imitated a legitimate library and activated a malicious loader during application runtime.
Bitcoin traded above $81,000 on September 21, while the NEAR token rose approximately 26.7% in one day. NEAR Intents data shows significant ZEC swap activity, but not a confirmed cause of NEAR’s price movement.
Zcash has published the NU7 upgrade timeline. Testnet activation is scheduled for October 6, with target mainnet activation on November 5, 2026, although the final decision has not yet been made.
The Fed raised its rate by 25 basis points. After the announcement, Bitcoin traded volatilely around $75,000 without a clear, significant reaction.
Security researchers have recorded attacks against self-hosted JFrog Artifactory servers in which attackers exploited three patched vulnerabilities to gain administrative privileges and establish persistence.
CVE-2026-82329 in JFrog Artifactory could give an unauthenticated attacker administrator privileges under the default configuration. Patches are now available for self-managed deployments.
The Australian Federal Police and Western Australia Police Force have charged two men as part of an investigation into the TeamPCP campaign. U.S. authorities have also unsealed an indictment against Ruben Ian Thomson.