A Leftover GitHub Repo Name Was Enough to Hijack npm Packages: The Trusted Publishing Flaw at a Glance
Trusted Publishing was supposed to make the JavaScript package registry npm safer by getting rid of long-lived publishing tokens. Researchers...
Month: October 2026
Why a Quantum Computing Company Is Paying Up to $1.3 Billion for Network Access Controls
On the surface it is an odd pairing. IonQ, a Maryland company best known for building quantum computers, announced on...
Hackers Heated Supermarket Freezers to 50°C Overnight: A Timeline of the Attack on French Grocery Chains
Most cyberattacks steal data or lock files. This one spoiled food. Over one night, attackers took control of refrigeration at...
GitLab Rates a New Pipeline Flaw 10 Out of 10: What Self-Hosted Teams Are Asking
Plenty of small and mid-size companies run their own GitLab server, often set up years ago by a developer or...
Attackers Are Hiding Behind Real Microsoft Power BI Links to Install Remote Access Tools
Here Is How Layered Defenses Help When the Link Looks LegitimateMost staff are taught to check where a link goes....
One Web Host Hit, Nearly 70 Mississippi Government Websites Down: A Briefing on the U.S. Next Attack
When a shared hosting provider goes down, every customer goes down with it. Mississippi has been living that since Friday:...
Let’s Encrypt Is Shortening Certificates to 64 Days: The Dates That Matter and What to Fix Before Them
Website certificates are about to expire faster. Let’s Encrypt, the free certificate authority behind a huge share of the web’s...
An Attacker’s Open Folder Exposed an AI-Driven Break-In Operation Hitting WordPress Sites
Attackers rarely let defenders watch them work, but one recently left the door open. A misconfigured server exposed the live...
Malware on One Contractor’s PC Puts 8.7 Million Karaoke Customer and Staff Records at Risk: Your Questions Answered
A single infected computer at an outside contractor has put the personal records of millions of karaoke customers in Japan...
A Perfect-10 WordPress Plugin Flaw Is Under Attack: The Bricksforge Spec Sheet and a Site Owner’s Checklist
If your company website was built with the Bricks visual builder for WordPress, check today whether it also runs the...
