Researchers at Reversing Labs identified two malicious packages on npm targeting the ‘ethers' package: ‘ethers-provider2' and ‘ethers-providerz.' These packages stand out because they download a secondary malware stage that monitors the legitimate ‘ethers' package, then swaps its ‘provider-jsonrpc.js' with a trojanized version. This trojanized file downloads a third-stage malware that creates a reverse shell to a malicious IP address. Reversing Labs emphasizes the severity of this issue, as removing the malicious package does not eliminate the risk since the trojanized legitimate package can still harbor the malware.
Researchers from Abnormal Security have discovered a new Credential Stuffing as a Service (CSaaS) called Atlantis AIO. Atlantis AIO can automate the process of account takeovers via brute forcing, credential stuffing, or abusing account recovery with pre-built integrations for 140 services. It also aids threat actors in bypassing CAPTCHAs and monetizing stolen credentials/accounts.
ReaderUpdate macOS malware loader has evolved to other languages such as Go and Rust. Initially a Python binary, it targets x86 Intel systems through third-party software sites, deploying adware and potentially serving as a pay-per-install platform for threat actors.
This blog post presents a method to produce high-quality threat models using Gemini 2.0 Flash Thinking and a series of prompts. The author found that the LLM performed poorly with prompts that were too long or too short but found that they could use multiple prompts that are in a “sweet spot” of length to science the desired results. They then used GitHub Actions to queue repositories into a pipeline that their AI Security Analyzer could then generate security design documentation, threat modeling, attack surface, and attack tree analysis for.
Security researcher Dylan Ayrey identified three key vulnerabilities in Eight Sleep's "Pod" mattress: a developer backdoor for SSH access, an exposed AWS key, and dependence on cloud services. He replaced the $4,700 hub with a $150 aquarium chiller, demonstrating a simpler solution for temperature control that avoided data collection and internet access, instead of relying on a $200-300 annual subscription.
The article discusses how BloodHound Enterprise addressed false positives in Active Directory attack paths due to object ownership permissions. It explains how Microsoft's BlockOwnerImplicitRights feature prevents compromised accounts from altering security descriptors to elevate privileges. The author details the implementation of OwnsLimitedRights and WriteOwnerLimitedRights edges in BloodHound v7.1.0, which correctly identify when these features are active, reducing false positives for users blocking owner implicit rights.
Sponsored
86% of cyberattacks on companies are credential-related; a data breach can cost millions; password managers like Bitwarden start at $4 per user. Read more about password managers and your IT budget [12]. Need enterprise password management that scales with your business? Trusted globally, Bitwarden is open source and compliant. See how to
SplxAI relies on automated security testing, continuous monitoring, and dynamic remediation to secure internal AI agents and customer-facing AI systems, preventing attacks such as prompt injections, hallucinations, and off-topic responses.
UTMStack is a unified threat management platform that merges SIEM (Security Information and Event Management) and XDR (Extended Detection and Response) technologies.
PurpleLab is a readily deployable lab solution for cybersecurity professionals to test and create detection rules, simulate logs, and undertake various security tasks.
Many threat actors are recognized by various names. These designations vary based on different vendors' conventions, such as Crowdstrike's use of animal names and Mandiant's APT classifications. This post features a list of threat actor names publicly disclosed by Microsoft, as well as additional names they are recognized by.
Troy Hunt of Have I Been Pwned recently fell for a phishing email that claimed his Mailchimp privileges were restricted, redirecting him to a site that stole his login and MFA code. The email's legitimacy was convincing, and fatigue combined with Outlook for iOS not displaying the email address contributed to his error. However, 1Password's lack of autofill should have prevented it. Hunt also questioned why Mailchimp kept unsubscribed emails and has added the breached email list to his site.
OpenAI is enhancing its security posture through a security grant program, a bug bounty cash increase, and AI-powered defense strategies. It is committed to protecting users, disrupting threats, and developing secure AI technologies as they advance toward AGI.
Astral Foods experienced a cybersecurity incident that resulted in $1.1 million in lost profits and disrupted poultry processing, but no customer data was compromised.
Australian police are investigating a cyber attack on the NSW Online Registry that resulted in the theft of 9,000 sensitive files, prompting authorities to contact potentially affected individuals due to risks of victim exposure and extortion.
A new ransomware group called Arkana Security claims to have hacked US telecom firm WideOpenWest (WOW!) and stolen customer information.
The rise of solo living is reshaping consumer behavior, with more individuals embracing solitude for self-care, creativity, and independence. By 2050, 35% of European households will be single-person. Solo activities like travel, dining, and self-dates are gaining popularity. Brands are adapting, from IKEA's small-space solutions to travel companies catering to solo adventurers.
U.S. ad revenue growth forecast is now at 4.3% for 2025, down from earlier estimates of 4.9%, amid economic uncertainty and potential disruptions from tariffs. Traditional media is expected to decline overall, with linear TV down 5.9% and local TV down 3.7%, while streaming TV ad revenue is projected to grow 14.3%. Most of the market's growth is concentrated in digital channels like social media and search, as advertisers prioritize near-term performance.
This report shows three music trends shaping 2025 advertising: Y2K nostalgia, classical compositions, and vintage tracks from the 1950s–1970s. These styles are being used to create emotional responses and strengthen brand association, supported by data showing stronger response and better engagement. The shift reflects a broader move from generic stock music to more intentional soundtracks.
Most SaaS pricing pages underperform by focusing on payment instead of showcasing value, leading to missed conversion opportunities. Headlines should emphasize customer benefits and frame the solution as a painkiller, boosting recall and priming action. Plan descriptions should highlight which audience each plan suits, reducing cognitive load and helping prospects decide faster. Strong offers should address objections, reduce risks, and differentiate from competitors. Persuasive social proof — testimonials, specific outcomes, and quantitative results — should be prominently placed to reflect customer success and nudge visitors toward conversion.
Skip generic event recaps and focus on capturing guest insights or a standout moment instead. Instead of basic BTS, create engaging shoulder content, which includes supporting material like interviews or highlight clips that extend the main campaign. For OOH, invest in professional capture if possible, or ensure social assets launch alongside placements. Prioritize content that educates, entertains, or resonates rather than just documenting.
YouTube is updating how it counts Shorts views, now tracking every play or replay instead of requiring a few seconds of watch time. This change, effective March 31, aligns Shorts metrics with TikTok and Instagram Reels, helping creators better gauge reach and inform content strategies. Earnings and eligibility for the Partner Program remain based on “engaged views,” which creators can still access in YouTube Analytics' Advanced Mode.
GPT-4o's image generation can now create precise, context-aware visuals. It renders detailed text and generates creative content like infographics and diagrams. Users can refine images through conversation, ensuring consistency across iterations. This tool is ideal for generating useful, practical images in various contexts, from logos to educational materials.
Brands create passionate believers by developing a clear ideology that resonates emotionally with customers. This ideology shapes perception, builds loyalty, and even drives people to defend and promote the brand. To establish this, brands should identify a unique perspective in their industry, turn that into a manifesto, and package it with a memorable name. In competitive markets, buyers are drawn not just to what a brand offers but to what it believes in, giving brands with strong ideologies a serious advantage.
Brand plays a measurable role in growth by influencing how quickly users trust a product, how much they spend, and how likely they are to share it. Figma's 2024 Config event is a great example. It drew over 10,000 attendees showing how a strong brand can accelerate product-led growth. In general, companies that outperform their PLG ceilings do so by integrating the brand and treating it as a foundational element of the user journey and the long-term growth strategy.
The internet is eating itself – we're rapidly approaching a future where human-written content will become a premium product again.
This post explains the different tasks each ChatGPT model is designed for.
Gap's “relevance-first” strategy, including dance-focused ads and simplified pricing, reflects a belief that cultural connection and relevance ultimately drive revenue growth.
CKEditor 5 initially struggled with performance issues when loading large, complex documents due to its multi-layered architecture. To fix these issues, its team reduced redundant conversions, improved tree traversal, and batched operations. As a result, document load times were reduced by 6–7x, showing the power of improving underlying algorithms within code rather than focusing on JavaScript micro-optimizations first.
Pgvector is a PostgreSQL extension for vector embeddings. PgDog scales `pgvector` by sharding the vector index. It distributes shards across multiple machines by using IVFFlat's existing vector space partitioning and K-means clustering, allowing for parallel queries based on proximity to centroids. This improves search performance, especially with larger datasets.
This article shows a simple implementation of an undo/redo stack in JavaScript. Instead of using a single stack with a pointer, the implementation uses two separate stacks, "past" and "future", to represent undoable and redoable actions, respectively, avoiding common indexing errors. It also addresses the pass-by-reference issue in JavaScript by using structuredClone() to guarantee that the undo and redo functions operate on cloned copies of the data, maintaining idempotency.
Breadcrumbs are obsolete in web design today due to the shift from hierarchical navigation to dynamic, search-first, and AI-driven user experiences. Mobile-first design, predictive navigation, and personalized content recommendations have made traditional breadcrumb trails redundant.
Vercel tightly couples Next.js with its own infrastructure, which prevents other providers from fully supporting the framework due to a lack of adapters, official serverless support, and Vercel-specific code paths. Its handling of a recent security vulnerability is concerning as it delayed notifying other providers.
CSV's strengths include its streamability, appendability, dynamic typing, and the unique property of remaining valid when reversed, which allows for efficient processing of the last rows. Its often-overlooked advantages make it very valuable still, especially when simplicity and flexibility are needed over features like strict typing and column-oriented access.
Sponsored
Join the Elastic team to learn how to build search that understands the meaning of a query, and the choices and options along this path: foundational text search, RAG, vector databases, and using ESRE for dynamically fine-tuning search relevance based on user behavior.
Cocommit is a command-line tool that uses LLMs to analyze and improve Git commit messages. It uses LangChain to support various LLM providers, offering shortcuts for easy usage and customizable options for different project needs.
Hyperlight is a lightweight, embeddable Virtual Machine Manager (VMM) designed for securely running untrusted code within micro virtual machines. It does this by using micro VMs without a kernel or OS, using Hyperlight Guest library for interaction between host and guest via defined APIs.
Expo Passkey is a plugin that allows secure passwordless authentication in Expo apps using native biometrics. It has features like key lifecycle management, a type-safe API, and UI components.
Google launched a 100-day sprint to develop a rival chatbot, Bard, led by VP Sissie Hsiao in response to ChatGPT's release. It reorganized its AI efforts by DeepMind and Google Brain to create the Gemini model. Despite setbacks and internal anxieties along the way, Google was able to integrate Gemini into its products and develop new AI features to maintain its competitive edge.
The OpenWorm project, launched in 2011, has been attempting to create a complete computer simulation of the C. elegans nematode, a simple organism with only 302 neurons. Despite the worm's relative simplicity and extensive research data, the project has struggled to produce a realistic simulation. Researchers believe that successfully simulating the worm could change our understanding of how brains and bodies interact.
The Node.js Technical Steering Committee (TSC) has voted to remove Corepack from future Node.js releases (25+) due to low adoption rates, distribution concerns, and the desire for package managers to evolve independently. Corepack was initially introduced to bridge the gap between different package managers.
OpenAI has added MCP support to its Agents SDK.
Mike Clark, the chief architect of AMD's Zen microarchitecture, discusses various hardware design decisions and their relationship to software development, x64 vs ARM, memory page sizes, CPU pipeline diagrams, and how software developers can better use existing and future hardware.
Expo Atlas helps React Native devs optimize app performance by providing insights into bundle contents, allowing them to identify and remove unnecessary dependencies, reduce bundle size, and improve startup time.
Lazy loading of background images can be done using the IntersectionObserver API, which monitors when offscreen images are about to become visible in the viewport and then loads them.
Sponsored
Technical debt can bankrupt software teams — of time, energy, and ability to innovate.
Google has introduced an experimental version of Gemini 2.5 Pro, which marks a sizable advancement in AI capabilities. The Gemini 2.5 models are designed to 'think' through problems, an approach that improves accuracy and performance. Google aims to embed these reasoning capabilities across all Gemini models to enable them to tackle complex challenges and support sophisticated context-aware agents. Gemini 2.5 Pro demonstrates strong reasoning and coding proficiencies, with leading scores on common coding, math, and science benchmarks.
2025.03.26·chromeunboxed.com·3 min read·TLDR