Topics

Sign in Subscribe

Security

Mini Shai Hulud strikes again hitting over 100 npm and PyPI packages including Mistral AI

Image credit: https://unsplash.com/@robert_coelho

Security

Mini Shai Hulud strikes again hitting over 100 npm and PyPI packages including Mistral AI

Re-emerging supply chain attack hitting hundreds of packages with tens of millions of weekly downloads.

May 12, 2026 3 min read

Pwn a CEO with a single email? Patch Tuesday brings nasty zero-click Outlook bug

Patch Tuesday

Pwn a CEO with a single email? Patch Tuesday brings nasty zero-click Outlook bug

May 12, 2026 4 min read

Copy Fail exploitation has begun, and Brian Pak is sorry for the chaos

linux

Copy Fail exploitation has begun, and Brian Pak is sorry for the chaos

May 4, 2026 4 min read

Linux bug “Copy Fail”: Short Python script gives root on… everything?

vulnerabilities

Linux bug “Copy Fail”: Short Python script gives root on… everything?

Apr 30, 2026 4 min read

Attack path visibility concerns outstrip AI among security leaders

Security

Attack path visibility concerns outstrip AI among security leaders

Apr 29, 2026 1 min read

China now as good as U.S. at offensive cyber: Dutch intelligence

Security

China now as good as U.S. at offensive cyber: Dutch intelligence

Apr 24, 2026 2 min read

The NCSC is worried about HDMI-based attacks, should you be?

Security

The NCSC is worried about HDMI-based attacks, should you be?

Apr 24, 2026 3 min read

activemq bugs exploited

ActiveMQ

Apache ActiveMQ bug chain gives pre-auth RCE, is getting exploited

Apr 23, 2026 3 min read

NCSC's first hardware product targets the security of your monitor

NCSC

NCSC's first hardware product targets the security of your monitor

Apr 22, 2026 2 min read

Lovable spews user data; says chats were MEANT to be publicly accessible - kind of.

Security

Lovable spews user data; says chats were MEANT to be publicly accessible - kind of.

The Stack

Apr 21, 2026 3 min read

Overstretched NIST to limit CVE enrichments

Security

Overstretched NIST to limit CVE enrichments

Apr 16, 2026 3 min read

Patch Tuesday's a monster: Thank AI?

Patch Tuesday

Patch Tuesday's a monster: Thank AI?

Apr 15, 2026 2 min read

Adobe Reader 0day abused in wild to deliver three-stage exploit chain

vulnerabilities

Adobe Reader 0day abused in wild to deliver three-stage exploit chain

Apr 10, 2026 2 min read

Cloudflare launches WordPress competitor to fix plugin security "crisis"

Wordpress

Cloudflare launches WordPress competitor to fix plugin security "crisis"

Apr 2, 2026 3 min read

Hugely popular npm package, Axios, compromised

Security

Hugely popular npm package, Axios, compromised

Mar 31, 2026 4 min read

“Sleeper cells” in telcos seen using novel new BPFdoor malware

malware

“Sleeper cells” in telcos seen using novel new BPFdoor malware

The Stack

Mar 30, 2026 2 min read

F5 BIG-IP exploited CVE-2025-53521

F5

F5, breached by an APT last year, says BIG-IP APM exploited

The Stack

Mar 27, 2026 2 min read

AWS Bahrain disrupted again; "Iran wiper" detected

Security

AWS Bahrain disrupted again; "Iran wiper" detected

Mar 24, 2026 2 min read

4 KVM vendors, 9 vulns – including an unfixed CVSS 9.8

Security

4 KVM vendors, 9 vulns – including an unfixed CVSS 9.8

Mar 17, 2026 2 min read

How to defend against recruitment as the attack surface

Security

How to defend against recruitment as the attack surface

Mar 16, 2026 4 min read

AppArmor vulnerabilities Linux CrackArmor Qualys

Security

The Linux “CrackArmor” vulnerabilities: What you need to know

Mar 13, 2026 3 min read