Category: Uncategorized

  • npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

    npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

    GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming publicly available for installation.

    Called staged publishing, the feature is now generally available on npm. It mandates that a human maintainer pass a two-factor authentication (2FA) challenge to approve

  • Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

    Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

    Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software across the world since the cybersecurity initiative went live last month.

    Project Glasswing is an effort led by the artificial intelligence (AI) company, as part of which a small set of about 50 partners

  • Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

    Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework.

    The affected packages include –

    laravel-lang/lang
    laravel-lang/http-statuses
    laravel-lang/attributes
    laravel-lang/actions

    “The timing and pattern of the newly published tags

  • LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

    LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

    A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.

    The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.

    “Any cPanel user (including an attacker or a compromised account) may

  • Remembering a modern philosopher: Wasco County announces the passing of Commissioner Phil Brady

    Free news: Friends and colleagues are remembering Phil Brady, the 70-year-old former science teacher’s life devoted to public service and his constant, teacherly invitations to experience the wonder of the natural world.
  • First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

    First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

    Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks.

    The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since December

  • Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

    The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine’s National Security and Defense Council) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to target government organizations in the country.

    The activity, per the Computer Emergency Response Team of Ukraine (CERT-UA), involves sending phishing emails to government

  • Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

    Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

    Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561 GitHub repositories within a six-hour window.

    “Using throwaway accounts and forged author identities (build-bot, auto-ci, ci-bot, pipeline-bot), the attacker injected GitHub Actions workflows containing base64-encoded bash payloads that exfiltrate CI

  • Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

    Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

    The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service (DDoS) botnet known as Kimwolf.

    In tandem, Jacob Butler (aka Dort), 23, Ottawa, Canada, has been charged with offenses related to the development and operation of the botnet. Kimwolf is assessed to be a variant of AISURU.

    “Kimwolf

  • CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

    The vulnerabilities in question are listed below –

    CVE-2025-34291 (CVSS score: 9.4) – An origin validation error vulnerability in Langflow that could