Spiking NN Lib BindsNET Compromised in DPRK Supply Chain Attack
cyb3rops · x · 2026-09-02
The open-source BindsNET library for spiking neural networks was compromised in a supply chain attack linked to the DPRK-associated NullReceiver campaign. Threat actors used a force-push with backdated commits to inject a malicious VS Code task and an obfuscated Node.js loader disguised as a Font Awesome file. Users should verify the integrity commit 780abb9d.
More from Safety
- One diagram explains the difference between CSRF and XSS attacks — _jaydeepkarale · 2026-10-18
- Grady Booch slams Anthropic for tolerating up to 50 deaths and $1B damages per model — Grady_Booch · 2026-10-18
- Single Neuron Suffices to Bypass Safety Alignment in LLMs, Paper Finds — burny_tech · 2026-10-18
- Polymarket gives OpenAI just 8% odds of a full training pause by end of 2026 — Polymarket · 2026-10-18
- OpenAI engineer over alleged hidden recording device seeks bail, denies Saudi escape plan — Polymarket · 2026-10-18
- Free comic "The Collective" offers a strange retelling of the Hugging Face hack — Flugelwagen · 2026-10-18