NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks
NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks By default, npm install will no longer execute…
Security
Cybersecurity, vulnerabilities, threats, and defense
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication Splunk has released security updates to address a critical security…
Chinese hackers hijack auth flow, spy on isolated network for a decade
Chinese hackers hijack auth flow, spy on isolated network for a decade Chinese hackers took control of a target organization’s…
Microsoft Patches BitLocker Recovery Loop Bug Hitting Windows Server 2025
Microsoft has quietly fixed a bug that was forcing some Windows Server 2025 machines straight into BitLocker recovery mode after…
OceanLotus APT Targets Vietnam Investors With SPECTRALVIPER Backdoor in Dual Campaigns
The Vietnam-linked advanced persistent threat group OceanLotus has been tied to two separate but overlapping campaigns — one aimed at…
New GreatXML Zero-Day Lets Attackers Crack BitLocker via Defender Flaw
A freshly discovered proof-of-concept exploit dubbed GreatXML can fully bypass BitLocker disk encryption on Windows machines — and the attack…
NSO Group Caught Phishing WhatsApp Users in Violation of Court Order
WhatsApp has caught the NSO Group—the Israeli spyware firm behind Pegasus—running phishing attacks against its users, in what appears to…
Microsoft Confirms Some Windows 11 Machines Can’t Install Latest Updates
Microsoft has issued a warning: if you upgraded your PC to Windows 11 24H2 or 25H2, you might be hitting…
New Windows Zero-Day ‘RoguePlanet’ Hits Microsoft Defender to Escalate Privileges
A freshly disclosed Windows zero-day dubbed “RoguePlanet” is making the rounds, and the mechanism is clever. The exploit targets a…
CISO Forum Kicks Off Mid-Year Check-In on Shadow AI Risks
The CISO Forum is running a webinar today walking security leaders through the biggest infosec challenges of 2026 so far,…