⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CrowdSec says a sophisticated npm supply chain attack on the TanStack ecosystem led to the exfiltration of approximately 170 private repositories belonging to organizations that had trusted the compromised packages. The attack involved the injection of malicious code into popular TanStack npm libraries, which then executed during CI/CD pipelines and development environments to steal access tokens and credentials.
CISA has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerabilities include a use-after-free flaw in the netfilter subsystem, a race condition in the io_uring subsystem, and an out-of-bounds write in the Bluetooth subsystem.
The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes.
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
A new survey of senior AI execs shows that while organizations are rapidly deploying AI and autonomous systems, their process and controls are not keeping pace.
MFA is essential, but it cannot replace OAuth governance, least-privilege scopes, consent monitoring, and rapid revocation.