The recent proposals around software liability, including the Cyber Resilience Act (CRA) in Europe and the National Cybersecurity Strategy (NCS) in the US, have sparked debates about accountability, especially among the open-source community. Supporters believe that liability could enhance security practices, directly holding companies responsible for insecure software. However, critics argue that such proposals oversimplify the complexity of cybersecurity and may hinder innovation. To address these concerns, policymakers must determine what constitutes a reasonable level of security and how much liability should cost.

“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,