Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-20 08:00 PDT
- Malicious npm packages evade install-script defenses at runtime
BleepingComputer • 2026-09-20 07:11 • www.bleepingcomputer.com
An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious code in a package’s normal runtime behavior rather than in installation scripts. […]
https://www.bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/ - Researchers escape OpenAI Codex sandbox to run commands on host
BleepingComputer • 2026-09-20 05:00 • www.bleepingcomputer.com
Researchers escaped OpenAI’s Codex sandbox two ways, one running commands on a developer’s machine from its most locked-down mode. OpenAI has patched both. […]
https://www.bleepingcomputer.com/news/security/researchers-escape-openai-codex-sandbox-to-run-commands-on-host/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
