News that matters, without the noise.

TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)

This diary continues the Internet Storm Center’s tracking of the TeamPCP supply chain campaign, first documented in the

A Security Raises $37 Million for Autonomous Offensive Security Platform

The company founded by Yossi Torati, Omer Gull, and Yuval Itzchakov has emerged from stealth mode. The post

‘Hades’ Campaign Against PyPI Puts New Spin on Shai-Hulud

The latest attacks, which hit 37 PyPI wheels and 19 code packages, show a continued evolution of the

Armenia’s pro-Europe party wins election despite Russia-linked disinformation

Pashinyan’s Civil Contract party won nearly 50% of Sunday’s vote, defeating the pro-Russian Strong Armenia party led by

WhatsApp says NSO targeted users with spearfishing attacks in violation of court order

WhatsApp said it is filing a federal court contempt order against NSO for violating a permanent injunction that

Critical Zcash Vulnerability Found and Fixed

If you’re a user—owner?—of this cryptocurrency, this is important: On May 29, the security researcher Taylor Hornby found

USN-8405-1: CUPS vulnerabilities

Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use

USN-8404-1: Transmission vulnerability

It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An

USN-8403-1: Kea DHCP vulnerability

Ali Norouzi discovered that Kea DHCP did not properly handle maliciously crafted messages over configured API sockets and

DSA-6329-1 tomcat11 – security update

https://security-tracker.debian.org/tracker/DSA-6329-1

DSA-6328-1 tomcat10 – security update

https://security-tracker.debian.org/tracker/DSA-6328-1

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access