A novel banker RAT, named VENON, has beed added to the Rust Malware Sample Gallery: https://github.com/decoderloop/rust-malware-gallery#venon

#rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #VENON

Still Toolkit has been added to the Rust Malware Sample Gallery: https://github.com/decoderloop/rust-malware-gallery/#still-toolkit

Still Toolkit is notably used against Russian organizations. The dropper that delivers it is written using @TauriApps

#rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #ArmoredLikho #EagleWerewolf #Tauri

Aurora is hiring Manager, HIL Platform Engineering

🔧 #cplusplus #golang #python #rust
🌎 Mountain View, California
⏰ Full-time
🏢 Aurora

Job details https://jobsfordevelopers.com/jobs/manager-hil-platform-engineering-at-aurora-tech-dec-30-2025-a12e15?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

Show HN: Openleetcode – local LeetCode runner where tests live in the repo

You write a standard solution, just like on LeetCode, and run it through the CLI. It identifies the problem by ID or title, executes your code against local test cases, and shows the result. It currently supports around…

https://github.com/therepanic/openleetcode

#Tech #Startup #OpenSource #HackerNews #Software #Python #C++ #Rust #Java #Go #TypeScript #Swift #LeetCode #TestAutomation #MVP #EngineeringTools [Hacker News]

Octagon: A New Android Bot Targeting Crypto Wallets and Banking Apps

In June 2026, a previously undocumented Android fraud bot called Octagon was identified, sold as malware-as-a-service by Russian-speaking actor AndroidKitKat for $1,400 monthly. The malware employs accessibility overlays, hidden VNC, SMS interception, unlock-pattern capture, and balance reading capabilities to target cryptocurrency wallets, exchanges, and banking applications. Distributed through sideloaded APKs with Restricted Settings bypass, Octagon connects infected devices to a Windows command-and-control panel where operators monitor applications, read screens, and control devices remotely. The malware maintains persistence through multiple mechanisms while appearing benign to security scans. Three APK samples were recovered, including deployments using Lifted Dreams game and Bahrain government lures. The malware captures credentials through HTML WebView overlays targeting Trust Wallet, Binance, MEXC, MetaMask, and messaging apps like Telegram and WhatsApp, enabling cryptocurrency theft and account t...

Pulse ID: 6a8474eb4f130dfa41887e40
Pulse Link: https://otx.alienvault.com/pulse/6a8474eb4f130dfa41887e40
Pulse Author: AlienVault
Created: 2026-08-18 15:06:19

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#APK #Android #Bank #Binance #CyberSecurity #Government #HTML #InfoSec #Malware #MalwareAsAService #OTX #OpenThreatExchange #RAT #RCE #Russia #Rust #SMS #Telegram #VNC #WhatsApp #Windows #bot #cryptocurrency #AlienVault

Experiment in reducing target directory size on nightly via @bd103 https://lobste.rs/s/omsqyf #rust
https://blog.rust-lang.org/inside-rust/2026/08/18/reducing-target-dir-size-on-nightly/

Alright Fedi, I'm looking for a job out of AI hell. I know chances aren't great for anyone right now, but I'm taking mine anyway.

I'm a (senior?) #Python developer with 10 years of experience in both #DataScience and #SoftwareEngineering (with a preference for the latter). I can find my way around #Rust and don't shy away from #JavaScript. I've done a bit of #React lately and haven't found it terrible.

I thrive in team environments where I have time both to work on my own and in pairs or mobs ( https://mob.sh is a great tool I'd use again, but IntelliJ's Code With Me works too).

My greatest passion is automating the tasks around coding away - testing, building, deploying code with either the shortest set of commands or just fully automated from a pipeline on pull/merge requests.

I won't say no to places that require me to use AI, but I have a strong preference to be able to write my code myself.

Would love boosts for reach! Also thanks for reading 💖

#FediJob #BoostsWelcome #BoostsAppreciated #GetFediHired

Edit because I'm really dumb: looking in the greater #Mainz/ #Wiesbaden area in #Germany or fully remote. Remote is generally an important factor for me for personal reasons; if your company does things like "3 days a week office", I will only be able to do this in a very small radius.

Here's v0.3.0 of ties, the federated bookmark manager, with a new light mode, flexible bookmark editing tools, and a critical security fix!

If you're using ties, please update at your earliest convenience. If you're not using it yet, now's a good time to try it out!

https://github.com/raffomania/ties/releases/tag/v0.3.0

#fediverse #selfhosted #activitypub #rust #htmx

Alt...

Screenshot of the ties home screen, with one half of the image showing the light mode, and the other half the dark mode.

GPU Offload in Rust: Portable, Safe, and Fast https://lobste.rs/s/agafnk #pdf #compilers #rust
https://arxiv.org/pdf/2608.13759

C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2

In July 2026, a new Rust-based malware family called C2Looper was identified, likely used by ransomware-related threat actors. The malware is assessed with low to medium confidence to be delivered through multi-stage ClickFix infection chains. C2Looper provides backdoor capabilities including remote shell execution, reconnaissance, and deploying additional payloads. It dynamically resolves Windows APIs and encrypts strings using XOR operations. The malware communicates via plaintext HTTP initially, but an evolved version uses GitHub repositories for command-and-control operations, storing commands and exfiltrated data in JSON files. Version 2 introduces additional commands such as reconnaissance collection, drive enumeration, shellcode injection, and file listing. The malware demonstrates active development with refined capabilities, likely serving initial access brokers for data theft and ransomware deployment.

Pulse ID: 6a8322da43ee19a9f60899af
Pulse Link: https://otx.alienvault.com/pulse/6a8322da43ee19a9f60899af
Pulse Author: AlienVault
Created: 2026-08-17 15:03:54

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CodeInjection #CyberSecurity #DataTheft #GitHub #HTTP #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RansomWare #Rust #ShellCode #Windows #bot #AlienVault

Awesome Links Of Last Week 🧵

Check thread below 👇

#rustlang #rust

Su experiencia con los JetBrains IDEs, ahora en LinkedIn
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/27/su-experiencia-con-los-jetbrains-ides-ahora-en-linkedin

Sua expertise com os JetBrains IDEs, agora no LinkedIn
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/27/sua-expertise-com-os-jetbrains-ides-agora-no-linkedin

JetBrains IDE のスキルを LinkedIn でアピールしよう
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/26/your-jetbrains-ide-expertise-now-on-linkedin

您的 JetBrains IDE 专业能力现在可在 LinkedIn 上展示
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/25/your-jetbrains-ide-expertise-now-on-linkedin

Votre expertise des JetBrains IDEs désormais visible sur LinkedIn
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/25/votre-expertise-des-jetbrains-ides-desormais-visible-sur-linkedin

Ihre JetBrains-IDE-Expertise – jetzt auf LinkedIn
#RustLang #Rust #RustRover #News

https://blog.jetbrains.com/blog/2026/06/25/ihre-jetbrains-ide-expertise-jetzt-auf-linkedin

I mean, this is fair and accurate for all languages mentioned...

#Programming #PHP #CPP #Javascript #Rust #Golang

Beyond WASI: Running any Rust application in the browser with BrowserPod 3.0 https://lobste.rs/s/fxv1u9 #linux #rust #wasm
https://labs.leaningtech.com/blog/browserpod-rust.html

Mojo 1: Looks like Python – but is more Rust

After a good three years, provider Qualcomm is tidying up the Python offshoot Mojo. The language is becoming more consistent, leaner, but also stricter.

https://www.heise.de/en/news/Mojo-1-Looks-like-Python-but-is-more-Rust-11415981.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

#Compiler #IT #Nvidia #Programmiersprachen #Python #Qualcomm #Rust #Softwareentwicklung #news

RT @dhh: DeepSeek Pro V4 Max just completed the challenge too! It took much longer, at 2:30h, but the total token spend was just $23! This is compared to ~$550 for Fable (45m), $55 for Grok 4.6 (1.5h), $43 for GPT Sol (?). Failed to complete: DSV4 Flash and GPT Luna. DHH (@dhh) Fable one-shotted a Rust rewrite of the TerminalTextEffects Python library in 11M tokens. Startup time went from 87ms to 2ms and rendering speed is up by 9.6x. Now zero dependencies and a 3mb single exec 🤯 claude.ai/code/artifact/2878… Link ttfx — all 37 effects All 37 ttfx effects animating the full Omarchy ASCII logo, rendered by the Rust binary. claude.ai — https://nitter.net/dhh/status/2086590006898958752#m

mehr auf Arint.info

#claude #DeepSeek #Grok #nitter #Python #Rust #arint_info

https://x.com/dhh/status/2088657836586807687#m

RT @dhh: DeepSeek Pro V4 Max just completed the challenge too! It took much longer, at 2:30h, but the total token spend was just $23! This is compared to ~$550 for Fable (45m), $55 for Grok 4.6 (1.5h), $43 for GPT Sol (?). Failed to complete: DSV4 Flash and GPT Luna. DHH (@dhh) Fable one-shotted a Rust rewrite of the TerminalTextEffects Python library in 11M tokens. Startup time went from 87ms to 2ms and rendering speed is up by 9.6x. Now zero dependencies and a 3mb single exec 🤯 claude.ai/code/artifact/2878… Link ttfx — all 37 effects All 37 ttfx effects animating the full Omarchy ASCII logo, rendered by the Rust binary. claude.ai — https://nitter.net/dhh/status/2086590006898958752#m

mehr auf Arint.info

#claude #DeepSeek #Grok #nitter #Python #Rust #arint_info

https://x.com/dhh/status/2088657836586807687#m

NLnet is looking for security-minded #Rust developer/software engineer.
Our new colleague will join the team responsible for development & operation of the (Rust based) back-end which facilitates our #opensource grant programs & integrates into our website.
As a small foundation with a big mission we work with hundreds of free and open source projects & a network of trusted partners. Come and join us to make this ecosystem run efficient & secure.
https://nlnet.nl/foundation/jobs/developer-rust.html
#getfedihired #FOSS

📋 #Stepshots is an open-source toolkit for recording interactive product demos — CLI, #Chrome extension, #React SDK and a live guided-tour player #opensource #rust #devtools
🧵👇

🎥 stepshots record drives a headless browser through tutorials defined in stepshots.config.json and bundles step-by-step screenshots into .stepshot files

⚙️ Native capture per OS: #ScreenCaptureKit + VideoToolbox on #macOS, Windows.Graphics.Capture with NVENC/QuickSync/AMF on #Windows, xdg-desktop-portal + #PipeWire on #Linux, into crash-safe fragmented MP4

📦 Built with #Rust and #Tauri, #React shell for presentation only, exports to MP4, WebM or GIF at 24/30/60 fps, projects stored locally

🌐 https://github.com/SECHAK-AG/capptivo

🖥️ Desktop app built with #Tauri + #React, gateway binary in #Rust. Auto-detects 20 AI clients including #ClaudeCode, #Cursor, #VSCode, #Codex, #Windsurf, #Zed and #LMStudio, and writes their config for you. HTTP/OpenAPI mode connects #OpenWebUI and #n8n directly.

📦 MIT licensed, Windows & macOS signed installers, Linux in beta.
https://github.com/tsouth89/toolport

🔀 #Switchyard is a #Rust proxy & library for #LLM traffic: it routes requests across providers and translates between #OpenAI and #Anthropic APIs #opensource #AI

Protocol translation covers OpenAI Chat, Anthropic Messages & OpenAI Responses — clients keep their native API while requests are served by #vLLM, NVIDIA NIM, #Ollama or any OpenAI-compatible endpoint
🧵👇

@jdm_ thank you for checking it out!

Also, this is actually still only half the story! There will probably be more blog posts.

To make this work, I had to work out a principled model for how re-exports interact with stability and doc(hidden). In discussing this with other Rustaceans, it turns out that this model is more complete and better-behaved than what rustc / rustdoc use internally. The rustc/rustdoc current internal model is a bit ... footgunny. For example, folks have accidentally stabilized things without anyone noticing 😬

So now we opened a proposal to adopt the cargo-semver-checks model in rustc + rustdoc: https://github.com/rust-lang/rust/issues/161153

#rust #semver

Protecting the Rust standard library from accidental breakage https://lobste.rs/s/hnx6id #rust
https://predr.ag/blog/protecting-the-rust-stdlib-from-breakage/

Rust CI now runs cargo-semver-checks to prevent accidental breakage in the standard library 🦀

If you're wondering why that's important and why it took 15kLoC+, this post is for you.
https://predr.ag/blog/protecting-the-rust-stdlib-from-breakage/

#rust #semver

Criador do Node.js lança alternativa open source aos Durable Objects da Cloudflare

"Dahl descreveu o celld como uma "implementação distribuída e auto-hospedada de Durable Objects e Workers". O projeto mantém compatibilidade com as APIs JavaScript dessas tecnologias, facilitando a adoção por desenvolvedores familiarizados com o ecossistema da Cloudflare."

https://www.cybersecbrazil.com.br/post/criador-do-node-js-lan%C3%A7a-alternativa-open-source-aos-durable-objects-da-cloudflare

#celld #rust #DurableObjects #localfirst

For a few months I have been building a terminal roguelike in Rust, in the spirit of ADOM and NetHack. New article on the technical groundwork:

Why ratatui and legion instead of a game engine, four map generators behind one trait (rooms, cellular-automata caverns, hand-drawn ASCII prefabs, and a hybrid where a test proves the vault has exactly one entrance), field of view and A* working on my own map type through two trait impls, content in RON files, and save games that store facts instead of serialising the ECS.

Writing it up also found two real bugs, both now fixed and tested.

https://blog.hofstede.it/crawlfest-building-a-terminal-roguelike-in-rust/

#rustlang #roguelike #gamedev #ratatui #proceduralgeneration #rust

RT @dhh: DeepSeek Pro V4 Max hat die Herausforderung ebenfalls abgeschlossen! Es dauerte deutlich länger, nämlich 2:30 Stunden, aber der gesamte Token-Verbrauch betrug nur 23 Dollar! Im Vergleich dazu: ~550 Dollar für Fable (45 Min.), 55 Dollar für Grok 4.6 (1,5 Std.) und 43 Dollar für GPT Sol (?). Gescheitert: DSV4 Flash und GPT Luna. DHH (@dhh) hat mit Fable eine Rust-Neuschreibung der Python-Bibliothek TerminalTextEffects in einem einzigen Durchgang mit 11 Millionen Token abgeschlossen. Die Startzeit sank von 87 ms auf 2 ms, und die Rendering-Geschwindigkeit stieg um das 9,6-fache. Jetzt ohne Abhängigkeiten und als einzelne 3-MB-Executable 🤯 claude.ai/code/artifact/2878… Link ttfx — alle 37 Effekte Alle 37 ttfx-Effekte animieren das vollständige Omarchy-ASCII-Logo, gerendert von der Rust-Executable. claude.ai — https://nitter.net/dhh/status/2086590006898958752#m

mehr auf Arint.info

#AI #DeepSeek #Innovation #OpenSource #Rust #TechComparison #arint_info

https://x.com/dhh/status/2088657836586807687#m

RE: https://mastodon.green/@LDJ/117100931804416751

unsafe impl Bat for Cat {

#RustCataStructures #rust #RustLang #cat #CatsOfMastodon #Caturday

AodeRelay boosted

Leanne J » 🌐 2026-08-15
@LDJ@mastodon.green

This kitten is officially a nutter 😆
#Sulley #CatsOfMastodon

Alt...

A black and white kitten hangs fully upside down from a set of black horizontal blinds in a window. Nutter.

Is your company currently hiring for a role that includes using Rust?

Reply with a link to the opening and any relevant context.

If you're not, we'd appreciate a repost for visibility

#rust #rustlang #programming

(rust) Typo of the day -> think_vec![] (instead of thin_vec![]) =D

#rust

🎥 New video on my #PeerTube channel!

A rusting collection of heavy plant machinery, left abandoned in a field in Shropshire

Join me on as I explore this spot ➡️ https://lostpod.space/w/39Af98a8xDNW7aN1uDLq4v

#UK #Video #UrbanExploration #Urbex #Machines #HeavyPlant #JCB #Rust

Another Friday, so it's time for another update on the work on Diesel, a ORM and query-builder for Rust.

This week we got one new issue report, 2 new PR's and new a "security" report.

#rust #rustlang

@csaf https://crates.io/crates/csaf-crud
#Rust #csaf

Write a SQL Optimizer using Egg (2023) https://lobste.rs/s/iarwcp #databases #performance #rust
https://rustmagazine.org/issue-2/write-a-sql-optimizer-using-egg

I want extern "fil-c" https://lobste.rs/s/tssf5y #c #rust
https://domenkozar.com/2026/08/13/i-want-extern-fil-c/

I am developing a library. There is an internal function `foo`, which I found several different ways to implement: `foo1`, `foo2`, `foo3`, etc.
Currently I have foo = foo1 but I might want to switch it to another one in a future version if I decide that it is better.
How should I keep all these possibilities in the code? If I keep these functions as comments, clippy complains about code in comments, but if I keep them as code, clippy complains about dead code.
Should I just allow dead code for these functions? Is there be a better way to do that?

#RustLang #Rust

New Armored Likho tools target Telegram and eavesdropping

In May 2026, a new cyber-espionage campaign by the Armored Likho group targeted private individuals and organizations across Russia, including major corporations, public sector entities, IT companies, and educational institutions. The operation used fake donation service applications as initial infection vectors. The attackers deployed a new toolkit called Still Toolkit, written in Rust, comprising two components: Still Sync steals Telegram session data enabling automated extraction of chat logs, media files and account information through Telegram API; Still Audio performs covert audio surveillance by analyzing incoming audio streams, automatically detecting speech patterns, recording conversations and transmitting them to command-and-control servers. The campaign demonstrates significant evolution in the group's capabilities, utilizing shared infrastructure patterns and encryption techniques consistent with previous operations.

Pulse ID: 6a7da6ccbbdd8552713c76a1
Pulse Link: https://otx.alienvault.com/pulse/6a7da6ccbbdd8552713c76a1
Pulse Author: AlienVault
Created: 2026-08-13 11:13:16

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Education #Encryption #Espionage #InfoSec #OTX #OpenThreatExchange #RAT #Russia #Rust #Telegram #bot #cyberespionage #AlienVault

This Week's Project Spotlight 🦀

libc

libc provides all of the definitions necessary to easily interoperate with C code (or C-like code) on each of the platforms that Rust supports.

#rustlang #rust

Tabs, Spaces, Hand Tools, and Seat Belts https://lobste.rs/s/xvezmx #ai #clojure #rust #zig
https://newsletter.powderworks.dev/p/tabs-spaces-hand-tools-and-seat-belts

A critical review of Xilem in 2026 https://lobste.rs/s/bccwjx #rust
https://hackmd.io/@s_haMSbyTAOWfoXc1aYNUg/Hka74gCwZg

fearless_simd v0.7: 64-bit integers, improved generics, SSE2, and upcoming v1.0 https://lobste.rs/s/pu96ia #release #rust
https://linebender.org/blog/fearless-simd-0-7/

Tail-Call Interpreters in Rust via @nemin https://lobste.rs/s/bp6bmx #plt #rust
https://lordgoati.us/blog/tail-call/