Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

OpenAI updates Agents SDK to improve agent safety and capability for enterprises

OpenAI’s updated Agents SDK adds sandboxing, configurable memory, and file/tool workflows for safer, stronger enterprise ...
InfoWorld

Critical flaw in Marimo Python notebook exploited within 10 hours of disclosure

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Critical Marimo pre-auth RCE flaw now under active exploitation

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Malware campaign lures users with fake Windows Update website

Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...
diginomica

Ground Control CIO Chris Howell re-thinks quoting to drive growth and cut carbon

A unique business model for the grounds management sector, B Corp membership, ecologically minded founders, and rapid growth ...

Mouse: P.I. For Hire Switch 2 Performance And Resolution Revealed

P.I. for Hire arrives on the Switch 2 next week after a slight delay. Ahead of the launch on 16th April 2026, Fumi Games and ...
Hackaday

This Week In Security: Flatpak Fixes, Android Malware, And SCADA Was IOT Before IOT Was Cool

Rowhammer attacks have been around since 2014, and mitigations are in place in most modern systems, but the team at gddr6.fail has found ways to apply the attack to current-generation GPUs.