Git’s Latest Release Stops Booby-Trapped Repositories From Running Code When You Clone Them: The Spec Sheet and an Update Checklist
Cloning a code repository is one of the most routine things a developer does. A newly fixed flaw in Git...
L7 News
Fireworks AI’s Breach Turned Out Bigger, and Some Notion Workspaces Are Caught Up in It. Your Questions on the LLMjacking Attack, Answered
When an AI provider first disclosed a break-in in October, the damage sounded contained. An updated notice published Monday tells...
From One Vendor’s Stolen Credentials to Dozens of Customer AWS Accounts: A Timeline of the Qubole Trusted-Access Breach
Many companies let outside software providers into their cloud accounts through a standing trust relationship, set up once and then...
Attackers Are Walking Into Xen Orchestra Without a Password and Taking Over XCP-ng Hosts. The Fix Is Out
If your company runs its virtual machines on XCP-ng and manages them through Xen Orchestra, the management console itself is...
Russia-Linked Spies Turned Exchange Servers Into Their Own Command Post. Layered Defenses Still Beat Any Single Product
Here Is How Layered Defenses Protect the Mail Server Attackers Want to Live OnMost malware has to phone home, and...
Chrome’s Eighth Exploited Zero-Day of 2026 Is Fixed. Here Is the Year’s Timeline, and Why Restarting the Browser Matters
Google has shipped another emergency Chrome update after confirming that attackers already have a working exploit for a newly reported...
N-able Pulls Hosted N-central Offline After a Researcher Publishes 30-Plus Unpatched Flaws With Working Exploit Code
One of the tools managed service providers use to run thousands of client computers is dark today, on purpose. N-able...
Shut It Down, Unplug, Call IT: How Vanderbilt Responded as a New Ransomware Gang Claimed Its Network
On Monday morning, Vanderbilt University’s students, faculty and staff received an unusual instruction: turn your university device off, get off...
Apple Fixes an iMessage Flaw That Could Let an Outsider Join Your Group Chat: The Spec Sheet and an Update Checklist
Group chats have quietly become a business tool. Sales teams coordinate deals in them, managers share schedules and family-run firms...
SEGA Says 2.2 Million Newsletter Emails Leaked Through Its Mailing Vendor. Your Questions on the ARARA Breach, Answered
When a company hands its mailing list to an outside email service, it also hands over part of its security....
