> TritonInfoSec News
Home / Apr 12, 2026 / Story
0
#3 The Hacker News general April 10, 2026 at 13:23 UTC

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

By [email protected] (The Hacker News)

AI Summary

The GlassWorm campaign evolved to use a new Zig dropper that infects all integrated development environments on developer machines through a malicious Open VSX extension named 'specstudio.code-wakatime-activity-tracker' that impersonates WakaTime. This supply chain attack specifically targets the developer ecosystem, potentially compromising source code and development processes across multiple IDEs.

Read full article → https://thehackernews.com/2026/04/glassworm-campai…

Relevance score: 88.0/100

# More from April 12

  1. 1
    Critical Marimo Flaw Exploited Hours After Public Disclosure SecurityWeek
  2. 2
    Analysis of one billion CISA KEV remediation records exposes limits of human-scale security BleepingComputer
  3. 4
    Juniper Networks Patches Dozens of Junos OS Vulnerabilities SecurityWeek
  4. 5
    Chrome 147 Patches 60 Vulnerabilities, Including Two Critical Flaws Worth $86,000 SecurityWeek
  5. 6
    Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data The Hacker News
  6. 7
    UK says it exposed Russian submarine activity near undersea cables The Record
  7. 8
    Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows The Hacker News
  8. 9
    Microsoft Finds Vulnerability Exposing Millions of Android Crypto Wallet Users SecurityWeek
  9. 10
    Orthanc DICOM Vulnerabilities Lead to Crashes, RCE SecurityWeek