by Beck Bailey | Oct 13, 2026 | RSS
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their...
by Beck Bailey | Oct 13, 2026 | RSS
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users’ sensitive data to advertisers. The administrative penalty is the largest issued by the data...
by Beck Bailey | Oct 13, 2026 | RSS
The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems...
by Beck Bailey | Oct 13, 2026 | RSS
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on...
by Beck Bailey | Oct 13, 2026 | RSS
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs...
Recent Comments