Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

The Hacker News - Sep 22, 2026

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," was first uploaded to the npm registry in mid-August 2026 by an npm account named "twdepprobe7731."

Read full article

More News

Microsoft to give DARPA hands-on access to quantum system at new Maryland site

Sep 22, 2026

Microsoft to give DARPA hands-on access to quantum system at new Maryland site

MICROSOFT-QUANTUM/ (PIX):Microsoft to give DARPA hands-on access to quantum system at new Maryland site

I Gave My Life Over to Meta’s A.I. Agent and Was Blown Away

Sep 22, 2026

I Gave My Life Over to Meta’s A.I. Agent and Was Blown Away

Muse, Meta’s A.I. agent, helped handle my dental insurance, booked dinner reservations and created a podcast for me. It also required my most personal data, and trust.

Texas Halts Data Center Permits, Expanding Environmental Scrutiny

Sep 22, 2026

Texas Halts Data Center Permits, Expanding Environmental Scrutiny

Less than a year ago, Gov. Greg Abbott welcomed data centers. Now he is confronting concerns about the projects even among fellow Republicans.

An Army of Paid Creators Is Carpeting the Web With Political Content

Sep 22, 2026

An Army of Paid Creators Is Carpeting the Web With Political Content

Unlike celebrity influencers with large followings, these creators produce a blizzard of videos for a fraction of the cost of traditional online campaigns and, in the process, shift public conversation.

An A.I. Image of Trump Kissing a Woman Was Fake. It Spread Anyway.

Sep 22, 2026

An A.I. Image of Trump Kissing a Woman Was Fake. It Spread Anyway.

Advances in artificial intelligence and the myriad ways content is shared online have made establishing authenticity even more difficult for users of social media.

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Sep 22, 2026

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point

$345 Million Verdict Against Greenpeace Should Be Overturned, Lawyers Say

Sep 22, 2026

$345 Million Verdict Against Greenpeace Should Be Overturned, Lawyers Say

A group of civil-rights and free-speech lawyers accused the judge of bias and “general incompetence.”

Anthropic Releases a New A.I. Model, Opus 5.5, Amid Safety Debate

Sep 22, 2026

Anthropic Releases a New A.I. Model, Opus 5.5, Amid Safety Debate

The company released a cheaper, faster model that it said was the strongest performer on its most rigorous internal safety tests to date.

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Sep 22, 2026

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Sep 22, 2026

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Sep 22, 2026

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

Recommended

The A.I. Party House Where Networking Has a Dark Side

Sep 22, 2026

The A.I. Party House Where Networking Has a Dark Side

Group tech houses have proliferated across the San Francisco Bay Area in the artificial intelligence boom. One of the most prominent has also racked up an extensive police record.

The Next Discovery

The Next Discovery is equipped with recent Science & Tech news to impart knowledge to individuals awaiting the future.

ABOUT US
NEWSLETTER

Copyright © 2015 - 2026 The Next Discovery. All Rights Reserved.