FR
live
archive

All articles

Trojanized npm packages ship RedC2 4.0, a Linux backdoor with an AI-assisted C2

On August 20, 2026, Trend Micro disclosed fourteen functional npm packages that drop RedShell, the Linux beacon of the RedC2 4.0 C2 framework, with no install hook and no exported function call. Audit your transitive dependencies and recent package additions before a single import compromises your servers.

Docker makes its Verified Publisher program self-serve

On August 20, 2026, Docker opened Verified Publisher applications to self-serve submission from Docker Hub, while keeping a manual review of every application. For teams that consume images, the badge remains a link in the trust chain — not a CVE guarantee.

A field report prices the IPv4 tax on EKS: about $143 a month per environment

On August 14, 2026, a RIPE NCC member published a field report on an IPv6-first EKS deployment on AWS: roughly $143 a month per environment saved, against a dated list of dependencies still stuck on IPv4. Teams standing up a new cluster now have an objective criterion for choosing IPv6-first over dual-stack.

Debian puts LLM use in its contributions to a project-wide, eight-option vote

From August 15 through August 28, 2026, Debian Developers are voting on a General Resolution governing LLM use in the project’s contributions, with eight proposals and a “None of the above” option. The outcome will set a de facto standard for the supply chain of enterprise Linux distributions.

Type at least two characters.

↑ ↓ navigate ↵ open esc dismiss