Collaborate Disseminate
The org’s staying mum on the details, but Wednesday’s fixes reach back to unsupported 8.9 branches Continue reading Clear your calendar, Drupal user: You have a critically urgent patch to install
While also spoofing all the trusted domains – Apple, Microsoft, and Google – in the same attack Continue reading Do fear the Reaper – stealer swipes macOS users’ passwords, wallets, then backdoors them
Plus three other stealers in three other packages, all from the same scumbag Continue reading Shai-Hulud copycat worm infects yet another npm package
Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs Continue reading Linux kernel flaw opens root-only files to unprivileged users
Shai-Hulud worm exploited GitHub Actions misconfiguration to poison shared cache, now project weighing nuclear option on unsolicited contributions Continue reading TanStack weighs invitation-only pull requests after supply chain attack
Researchers say 18-year-old flaw already being probed and exploited just days after disclosure Continue reading NGINX Rift attackers waste no time targeting exposed servers
Shift comes amid mounting reports of successful social engineering attacks targeting higher-ups in government Continue reading Poland directs officials to ditch Signal in favor of ‘secure’ state-developed alternative
MoD says StormBreaker will plug gap until homegrown SPEAR 3 integration lands Continue reading F-35 software delays leave UK buying time with US glide bombs
Firefox maker says the tools are basic security infrastructure, not teenage contraband Continue reading Mozilla warns UK: Breaking VPNs will not magically fix Britain’s age-check mess
No customer info stolen, no impact to operations, and no blackmail payment Continue reading Grafana Labs admits all its codebase are belong to someone who popped its GitHub account