GitHub announces npm security changes to tackle supply-chain attacks By Bill Toulas June 10, 2026 03:41 PM GitHub has announced that npm v12, expected next month, will introduce several security…
SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA By Sergiu Gatlan May 12, 2026 07:04 AM SAP has released the May 2026 security updates addressing 15 vulnerabilities across multiple…
…attacks Microsoft links Medusa ransomware affiliate to zero-day attacks TrickBot teams up with Shatak phishers for Conti ransomware attacks Microsoft blames macOS update for undismissible Teams location prompts Microsoft plans to…
OpenAI confirms security breach in TanStack supply chain attack By Lawrence Abrams May 14, 2026 03:07 PM OpenAI says two employees' devices were breached in the recent TanStack supply chain attack…
…More recently, in March, Oracle released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability (CVE-2026-21992) in Identity Manager and Web Services Manager, but…
…This feature will launch with iOS 27 for the Passwords app and Safari, which can automatically update eligible accounts to strong passwords. Apple promises security and privacy with Apple Intelligence Apple argues…
Why the browser is now the front line for AI security Sponsored by Push Security June 2, 2026 10:30 AM Security teams are staring at two AI problems at once. Adversaries…
…In the long term, to mitigate the risk from similar attacks, consider enforcing lockfile-only installs, which should prevent auto/silent package updates. UPDATE [08:36 EST]: Added information from Microsoft Threat…
…However, those samples infected machines via different attack chains, including Microsoft Defender binaries, AdaptixC2 shellcode and a decoy PDF, and impersonating update sites from multiple security vendors (e.g., CrowdStrike, SentinelOne, and…
…discontinue use of the product if mitigations are unavailable." On Thursday, Trend Micro also released security updates to address seven local privilege escalation vulnerabilities in the Apex One Standard Endpoint Protection (SEP…
