Please note Office visits are by appointment only. We support businesses with 10+ users or workstations, or with servers or cloud services to manage. No residential or walk-in computer repair. Book a time →

Author: Robert Timlick

  • GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

    GitHub on Tuesday said it’s investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform’s source code and internal organizations for sale on a cybercrime forum.

    “While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises,

  • Typosquatting Is No Longer a User Problem. It’s a Supply Chain Problem

    AI-generated lookalike domains are now embedded inside the third-party scripts running on your web properties. Here’s why your current stack can’t see them, and what detection actually requires.
    Download the CISO Expert Guide to Typosquatting in the AI Era →

    TL;DR 

    Typosquatting is no longer a user problem. Attackers now embed lookalike domains inside legitimate third-party scripts.

  • Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

    Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

    Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week.

    The zero-day flaw, now tracked as CVE-2026-45585, carries a CVSS score of 6.8. It has been described as a BitLocker security feature bypass.

    “Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as ‘YellowKey,’” the

  • Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

    Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised.

    It said the scope of the incident is limited to the Grafana Labs GitHub environment, which includes public and private source code along with internal GitHub repositories.

    “After the initial assessment, we found that in addition to source

  • GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

    GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

    GitHub on Tuesday said it’s investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform’s source code and internal organizations for sale on a cybercrime forum.

    “While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises,

  • May 19 Primary Election: Preliminary results for Hood River and Wasco counties

    May 19 Primary Election: Preliminary results for Hood River and Wasco counties

    Free news: preliminary results of the May 19 Primary Election as of 8 p.m.
  • Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

    Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

    Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users.

    The activity, per HUMAN’s Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-control (C2) domains, turning the infrastructure into a pipeline for multi-stage fraud.

    “Users

  • DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

    DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

    Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalation (LPE).
    Dubbed DirtyDecrypt (aka DirtyCBC), the vulnerability was discovered and reported by the Zellic and V12 security team on May 9, 2026, only to be informed by the maintainers that it was a duplicate of a vulnerability that had
  • The New Phishing Click: How OAuth Consent Bypasses MFA

    The New Phishing Click: How OAuth Consent Bypasses MFA

    In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries. 

    The targets of the platform received a message asking them to enter a short code at microsoft.com/devicelogin and complete their normal MFA challenge, then walked away believing they had verified a

  • SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

    Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution, that could be exploited to achieve remote code execution and enable an attacker to read arbitrary mails from the virtual appliance.
    “These vulnerabilities could have been exploited to read all mail traffic or as an entry vector into the internal network,”