MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

News

Technology & Digital Insights

The latest news, trends and insights on technology, artificial intelligence, cybersecurity, marketing and the digital world.

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of

The Hacker News · October 17, 2026

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon. "FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor," the researcher said in a GitHub README file, adding

Tech Sep 03, 2026

ChatGPT, Grok, and Claude all went down at the same time

OpenAI's ChatGPT, xAI's Grok, and Anthropic's Claude are all experiencing issues. At around 11AM ET, ChatGPT started returning error messages for users trying to use the chatbot, with its status page saying there are currently "elevated errors across ChatGPT and Codex." In addition to preventing users from having conversations with ChatGPT, the outage is also […]

Tech Sep 03, 2026

Google says its AI weather model is getting better

Google is rolling out an updated AI weather model that's supposed to be more accurate, especially when it comes to predicting rain and snowfall. In the announcement today, the company says it's now able to make forecasts with "unprecedented resolution" using its new WeatherNext 3 AI model. It can produce a global picture that's five […]

Tech Sep 03, 2026

Dyson’s new straightener has liquid cooling pipes to reduce hair damage

After expanding its health and beauty lineup earlier this week with a camera-equipped electric toothbrush, Dyson is also introducing two new hair care products this month. The $329 Corrale CoolShine straightener upgrades the original Corrale that launched in 2020 with active cooling technology designed to "reduce residual heatexposure" so hair feels smoother, softer, and cooler […]

Security Sep 03, 2026

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 (CVSS score: 10.0) - A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated

Marketing & SEO Sep 03, 2026

Long-tail keywords: the ultimate guide

Use long-tail keywords to drive quality traffic to your site from search and AI. Here’s how.

Marketing & SEO Sep 03, 2026

Is AI Making It So Anyone Can Run Effective TikTok Ads?

Want to run TikTok ads but find the Ads Manager interface overwhelming and the learning curve too steep? Wondering how new AI-powered tools can help create, manage, and optimize TikTok ad campaigns without needing deep platform expertise? In this article, you'll discover how TikTok's latest AI tools, including Agentic Hub, Symphony Creative Studio, and Content […]

Tech Sep 03, 2026

Hohem’s tiny steadycam has a removable action cam

Hohem is trying something new with its Eyepic handheld stabilized camera to differentiate it from existing offerings from companies like DJI and Insta360. At its core, the camera is functionally similar to devices like the Osmo Pocket 4 and Insta360 Luna Ultra with a rotating preview screen and a small camera module stabilized by a […]

Tech Sep 03, 2026

How Sonos rebooted itself

Today, I’m talking with Tom Conrad, the CEO of Sonos. Tom and I have known each other for a long time — he was the chief technology officer of Pandora, VP of product at Snap, and the chief product officer of Quibi. He was also on the board at Sonos during its disastrous 2024 app […]

Tech Sep 03, 2026

SwitchBot’s retrofit door lock offers 19 ways to unlock it

SwitchBot has launched a new retrofit smart lock that gives owners multiple ways to enter European homes without a traditional key. Announced at IFA today, the SwitchBot Lock Ultra Max Vision Pro Combo provides multi-user entry and up to 19 ways to unlock doors, including fingerprint scans, passcodes, NFC card access, contactless authentication via facial […]

Tech Sep 03, 2026

DJI’s new robovac can climb obstacles, vacuum quietly, and claims much improved privacy

DJI has announced a second generation of its Romo robovac. The Romo 2 series is quieter, more powerful, and better at climbing over small steps and other obstacles. But more importantly for DJI, a new local-only data mode should go some way to reassuring anyone concerned by the first Romo's serious security flaws. There are […]

Tech Sep 03, 2026

Nvidia is buying Hugging Face for almost $13 billion

Nvidia has agreed to buy Hugging Face for $12.93 billion, bringing one of the most popular hosting platforms for open-source AI models, datasets, and tools under the ownership of the world's biggest AI chipmaker. Hugging Face is an online platform founded in 2016 that gives AI developers a space to share their projects and data […]

Ready to build a better digital experience?

We create modern multilingual websites, integrate external services and automate content workflows for growing businesses.

Let’s discuss your project