GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks - 惯性聚合

推荐订阅源

cs.AI updates on arXiv.org

CXSECURITY Database RSS Feed - CXSecurity.com

Cyber Attacks, Cyber Crime and Cyber Security

Google DeepMind News

博客园_首页

Schneier on Security

CERT Recently Published Vulnerability Notes

Security Affairs

Hacker News - Newest: "LLM"

人人都是产品经理

Visual Studio Blog

Last Week in AI

Attack and Defense Labs

Hacker News: Ask HN

cs.CV updates on arXiv.org

阮一峰的网络日志

Secure Thoughts

Application and Cybersecurity Blog

Cyber Security Advisories - MS-ISAC

Heimdal Security Blog

SegmentFault 最新的问题

Darknet – Hacking Tools, Hacker News & Cyber Security

Troy Hunt's Blog

The Exploit Database - CXSecurity.com

Tailwind CSS Blog

Kaspersky official blog

Recent Commits to openclaw:main

博客园 - 三生石上(FineUI控件)

Threat Research - Cisco Blogs

WordPress大学

Microsoft Azure Blog

News and Events Feed by Topic

The Hacker News

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breaches PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories Day Zero Readiness: The Operational Gaps That Break Incident Response PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack The Hacker News Launches 'Cybersecurity Stars Awards 2026' — Submissions Now Open Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing? Google's Android Apps Get Public Verification to Stop Supply Chain Attacks Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass ⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More 2026: The Year of AI-Assisted Attacks Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV Trellix Confirms Source Code Breach With Unauthorized Repository Access 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists Top Five Sales Challenges Costing MSPs Cybersecurity Revenue Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong) Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXi Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE After Mythos: New Playbooks For a Zero-Window Era Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202 Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack ⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malware Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine 26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2 LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories [Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speed Project Glasswing Proved AI Can Find the Bugs. Who's Going to Fix Them? China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoors Vercel Finds More Compromised Accounts in Context.ai-Linked Breach Apple Patches iOS Flaw That Stored Deleted Signal Notifications in FBI Forensic Case Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack Toxic Combinations: When Cross-App Permissions Stack into Risk Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

The Hacker News · 2026-06-11 · via The Hacker News

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。