News that matters, without the noise.

‘Hades’ Campaign Against PyPI Puts New Spin on Shai-Hulud

The latest attacks, which hit 37 PyPI wheels and 19 code packages, show a continued evolution of the

Armenia’s pro-Europe party wins election despite Russia-linked disinformation

Pashinyan’s Civil Contract party won nearly 50% of Sunday’s vote, defeating the pro-Russian Strong Armenia party led by

WhatsApp says NSO targeted users with spearfishing attacks in violation of court order

WhatsApp said it is filing a federal court contempt order against NSO for violating a permanent injunction that

Critical Zcash Vulnerability Found and Fixed

If you’re a user—owner?—of this cryptocurrency, this is important: On May 29, the security researcher Taylor Hornby found

USN-8405-1: CUPS vulnerabilities

Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use

USN-8404-1: Transmission vulnerability

It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An

USN-8403-1: Kea DHCP vulnerability

Ali Norouzi discovered that Kea DHCP did not properly handle maliciously crafted messages over configured API sockets and

DSA-6329-1 tomcat11 – security update

https://security-tracker.debian.org/tracker/DSA-6329-1

DSA-6328-1 tomcat10 – security update

https://security-tracker.debian.org/tracker/DSA-6328-1

CrowdStrike and Zscaler Bring Continuous Identity to Zero Trust Access

New Pink Hacking Group Attacking Enterprise Users to Steal Cloud Storage Passwords

A newly identified extortion group called Pink has emerged as a serious threat to enterprise organizations, using social

Malspam Attack Uses Google DoubleClick Redirects to Deliver Fileless .NET Loader

Cybercriminals have found a new way to sneak malware past email security tools, and this time they are