Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
npm Enhances Supply Chain Security with 2FA-Gated Publishing
npm now requires maintainers to pass a 2FA challenge to approve new package releases, adding a crucial human verification step to prevent supply chain
Packagist Supply Chain Attack Leverages GitHub for Linux
Eight PHP packages on Packagist were compromised with malicious code that downloads and executes a Linux binary from GitHub Releases, aiming to steal
AI Finds Over 10,000 High-Severity Software Vulnerabilities
Anthropic's Project Glasswing, an AI initiative, has discovered more than 10,000 high- or critical-severity vulnerabilities in widely used software si
Laravel Lang packages compromised in supply chain attack to
Attackers hijacked Laravel Lang packages on Composer by manipulating GitHub version tags to distribute a cross-platform credential stealer.
Laravel-Lang PHP Packages Compromised in Supply Chain Attack
Malicious code was injected into several Laravel-Lang PHP packages between Nov 10-14, 2023, distributing a cross-platform credential stealer.
Critical LiteSpeed cPanel Plugin Vulnerability
A critical vulnerability (CVE-2026-48172) in the LiteSpeed User-End cPanel Plugin, with a CVSS score of 10.0, is being actively exploited.
AI-Accelerated Vulnerability Discovery Increases Linux
The use of AI tools to identify Linux kernel vulnerabilities is accelerating the discovery and public disclosure of bugs, leading to a surge in report
CISA Adds Actively Exploited Drupal SQL Injection to KEV
CISA has added CVE-2026-9082, a critical SQL injection vulnerability in Drupal Core, to its Known Exploited Vulnerabilities catalog due to active expl
Russian threat actor uses jailbroken Gemini to automate
A threat actor known as bandcampro used jailbroken Google Gemini to automate a multi-stage campaign targeting political groups, resulting in compromis
First VPN Service Dismantled in Global Operation Against
Operation Saffron, a multinational law enforcement effort, has dismantled First VPN Service, a VPN used by at least 25 ransomware groups to mask their
No new cybersecurity incidents reported in current news
The provided article focuses on South Pacific squid fishing regulations and does not contain any cybersecurity news or security-related incidents.
Megalodon campaign poisons over 5,500 GitHub repositories
An automated campaign dubbed Megalodon injected malicious commits into 5,561 GitHub repositories to steal CI/CD credentials, cloud access tokens, and