News that matters, without the noise.

North Korean Hackers Turn Trusted npm Packages Into a Gateway for Supply-Chain Attacks

North Korean-linked hackers are turning trusted npm packages into an entry point for widespread software supply-chain attacks. By

RHSA-2026:47731: Important: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has

RHSA-2026:47718: Important: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

TA488 May Have Exploited Outlook Web Access 0-Day Flaw Before Microsoft’s Emergency Patch

TA488 has been linked to a new campaign that turns a routine Outlook Web Access email into a

Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th)

[This is a Guest Diary by Adam Cann, an ISC intern as part of the SANS.edu BACS program]

SE Asian Cybercriminal Syndicates Become a Global Power

The groups move from goods to services and continue to traffic people from at least 80 countries, costing

‘Flying Eagle’ Full-Service Mobile RAT Builder Wings Across China

A premium-grade malware-as-a-service offering takes flight with multiple threat groups, building infostealers that drain victims’ bank accounts.

RHSA-2026:47722: Important: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

DSA-6403-1 nss – security update

https://security-tracker.debian.org/tracker/DSA-6403-1

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web

MITRE ATT&CK for Beginners: First Steps

RHSA-2026:47772: Important: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat