OpenAI says hackers stole limited credential data from a small subset of internal source code repositories accessed by two employees, after a supply chain attack affected their devices. The company reports no evidence that user data, production systems, intellectual property, or existing software installations were compromised. OpenAI traces the incident to an earlier TanStack open source breach, where attackers published 84 malicious software versions over a six-minute window. OpenAI is rotating signing certificates as a precaution, requiring macOS updates.
A new visualization imagines the world’s largest malware repositories as stacked hard drives, making the scale of cybercrime feel physical. The graphic helps highlight how much harmful code is amassed, traded, and reused across attacks—turning “malware databases” into a tangible volume of risk that keeps growing.
Your news, in seconds
Get the Beige app — every story in 60 words, updated hourly. Free on iOS & Android.
With IPL 2026 under way, cyber criminals are moving fast to exploit fan excitement. Reports say more than 600 fake ticket sites and around 400 malware-linked streaming options are luring viewers with counterfeit passes and “free” broadcasts. The schemes aim to steal sensitive data such as login credentials and even digital currencies, turning match-day hype into real-world risk.
Kaspersky says the SilverFox hacker group is targeting Indians with fake Income Tax Department emails designed to lure people into downloading malware. The campaign uses convincing “official notice” text and a multi-stage infection chain, deploying backdoors such as ValleyRAT and ABCDoor to secure remote access. The goal is to steal sensitive information and exploit victims’ systems.
A new, unidentified hacking group has reportedly broken into systems that were previously compromised by the cybercrime outfit TeamPCP. What stands out: right after gaining access, the intruders quickly removed TeamPCP’s presence and deleted its hacking tools, suggesting the later attackers either caught them or are running a rival operation.
Kaspersky says it suspects Chinese-linked hackers planted a backdoor into Daemon Tools, a popular Windows utility. The firm reports thousands of infection attempts and at least a dozen confirmed compromises after users installed malicious versions of the software. The incident raises new concerns about supply-chain risks and the need to verify downloads before installing.
Never miss a story
Set alerts for the topics and sources you care about. Download Beige for free.
Researchers report a new spyware case tied to government authorities using a fake Android app to infect a target phone. The alleged developer was previously unknown for selling this kind of surveillance software, suggesting spyware supply chains may be broader than expected and harder to track once malware is disguised as everyday tools.
Swipe through stories, personalise your feed, and save articles for later — all on the app.