Malicious Rust packages on Crates.io steal crypto wallet keys

Published on September 25, 2025

Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal cryptocurrency private keys and other secrets. [...]

Continue reading on website
Other news

Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection

September 25, 2025
Cybersecurity researchers have disclosed a critical flaw impacting Salesforce Agentforce, a platform for building artificial intelligence (AI) agents, that could allow attackers to potentially exfiltrate sensitive data from its customer relationship management (CRM) tool by means of an indirect prompt injection.The vulnerability has been codenamed ForcedLeak (CVSS score: 9.4) by Noma Security,

Amazon pays $2.5 billion to settle Prime memberships lawsuit

September 25, 2025
Amazon will pay $2.5 billion to settle claims by the U.S. Federal Trade Commission (FTC) that it used dark patterns to trick millions of users into enrolling in its Prime program and made it as difficult as possible to cancel the recurring subscriptions. [...]