News that matters, without the noise.

Alexandria Ocasio-Cortez shows Georgia well water to EPA at hearing.

What does it mean for GitHub users? Watch to find out.

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend

Cross-Platform NPM Stealer, (Fri, May 22nd)

I found a Node.js stealer that looked pretty well obfuscated. The file was not running out-of-the-box because it

Mini Shai-Hulud Attack Forces npm to Reset Bypass-2FA Publishing Tokens

The npm registry made an urgent platform-wide move last week after supply chain attacks threatened thousands of developers.

China’s Webworm Uses Discord, Microsoft Graphs to Hack EU Govts.

The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as

Discord Announces End-to-End Encryption by Default for Video and Voice Messages

Discord has officially rolled out end-to-end encryption (E2EE) for all voice and video communications across its platform, marking

Megalodon Malware Compromised 5,500+ GitHub Repos Within 6 Hours

A sweeping automated supply chain attack codenamed “Megalodon” struck GitHub on May 18, 2026, injecting malicious CI/CD backdoors

ISC Stormcast For Friday, May 22nd, 2026 https://isc.sans.edu/podcastdetail/9942, (Fri, May 22nd)

DSA-6290-1 nss – security update

https://security-tracker.debian.org/tracker/DSA-6290-1

DSA-6289-1 openvpn – security update

https://security-tracker.debian.org/tracker/DSA-6289-1

ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication