All CosmicBytez Labs articles tagged #Rust, across news, security advisories, how-to guides, and projects.
Pakistan-aligned APT36 debuts RUSTYSHADE, a Rust backdoor using private GitHub repos for C2, targeting India and Afghanistan govt/defense.
CVE-2026-82452 (CVSS 9.8): rust-iot-platform's REST API lacks auth checks — anyone can create, edit, or delete accounts, no login required.
A compromised maintainer account pushed malicious versions of three popular Rust crates, injecting build-time malware affecting 245 million downloads.
IronWorm, a self-propagating supply chain worm written in Rust, is targeting npm developers to steal credentials and reuse them to spread across the...
Two distinct malware campaigns have hit the npm ecosystem simultaneously — IronWorm deploys a Rust-based infostealer via 50+ poisoned packages, while a new…