Security & Privacy
9 researched emerging terms in Security & Privacy. Sorted by detection date — newest first.
Keyv is a widely used open-source npm caching library — simple key-value storage with pluggable backends — maintained by developer Jaredwray and installed transitively by tools like ESLint. In current…
wp2shell is the nickname for [CVE-2026-63030](https://wp2shell.com/), a WordPress Core exploit chain that lets an anonymous attacker run arbitrary code on a stock install with no plugins and no accoun…
Januscape is the branded name for [CVE-2026-53359](https://www.openwall.com/lists/oss-security/2026/07/06/7), a use-after-free bug in the shadow MMU code KVM shares between Intel and AMD x86 hosts, le…
Miasma is a self-propagating supply-chain worm that steals developer credentials and cloud secrets by hijacking npm packages, PyPI packages, and GitHub repository configuration files. Built on the pub…
RootShell is a new end-to-end encrypted email service hosted in Iceland, positioning itself as a privacy-first alternative to Proton Mail and Tuta by combining Iceland's outside-14-Eyes jurisdiction w…
Protestware is open-source software that a maintainer intentionally sabotages to deliver a political or social message, targeting users rather than doing what the package advertises. The technique ran…
Mini Shai-Hulud is the fourth-generation variant of the Shai-Hulud supply-chain worm family, built by threat group TeamPCP to self-propagate across npm, PyPI, and Packagist by stealing CI/CD credentia…
Universal Linux LPE describes a local privilege escalation exploit that gains root access across every major Linux distribution — no race condition required, no kernel-version-specific offsets, no ele…
A webhook secret is a shared string used to authenticate webhook deliveries: the sender computes an HMAC signature over the payload with the secret and sends it in a header like `X-Hub-Signature-256`;…