Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
Microsoft

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Bleeping Computer

Hugging Face abused to spread thousands of Android malware variants

A new Android malware campaign is using the Hugging Face platform as a repository for thousands of variations of an APK payload that collects credentials for popular financial and payment services.
PC Magazine

TurboTax vs. FreeTaxUSA: Which Should You Use to File Your Taxes?

Our Editors’ Choice winners for tax software help you get through the filing season as painlessly as possible. Here's how they stack up on cost, support, tax coverage, usability, and more. I write ...