Widespread npm Supply Chain Attack: Breaking Down Impact & Scope Across Debug, Chalk, and Beyond
What happened? On September 8th, 2025, at around 9AM EST, a threat actor had managed to gain control of the npm account of well-known developer…
Month: July 2026
Least privilege for AI agents: Identity, access, and tool binding
In this article AI agents aren’t only smarter API callers. They plan, chain actions across systems, and invoke tools in sequences while no single human…
Coca-Cola says Fairlife ransomware attack halts US dairy production
The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the…
Two Hackers Jailed for Hacking 148 Transport for London Systems, Forcing Password Reset for 27,000 Staff
Two young members of the Scattered Spider cybercrime group have been jailed for a 2024 attack that knocked out 148 Transport for London (TfL) systems,…
CISA Warns Russian FSB Hackers Are Targeting Critical Infrastructure Routers
Who Is Affected and Next Steps The Russian Federal Security Service (FSB)-affiliated cyber outfit Center 16 is actively scanning the internet for vulnerable and poorly…
UK Government Unveils AI Powered Cyber Shield to Strengthen National Cyber Defense
The National Cyber Security Centre (NCSC) has unveiled plans for Cyber Shield, an ambitious initiative that aims to use agentic artificial intelligence to transform the…
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It…
Reeves speaks up about UK sovereign AI
Chancellor Rachel Reeves used her Mansion House speech to talk about the UK’s AI strategy and sovereign AI capabilities. She described AI as “the defining…
Notorious 1990s hacker held over €100 million-a-month fraud ring
Dutch police say they have taken into custody a 46-year-old man with dual Israeli and Polish nationality, for his role in a large-scale investment fraud…
‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing
A new macOS malware named ClickLock Stealer leverages social engineering and process killing to bypass the operating system’s protections and obtain valuable information from victims. …
Russian trio indicted for allegedly running bulletproof hosting providers that spurred cybercrime
Three Russian nationals and a pair of bulletproof hosting providers directly supported a series of attacks on critical infrastructure in 21 states and several countries,…
When AI gets a body, it inherits an attack surface
Embodied AI puts a model inside a machine that operates in the physical world: a robot, an arm, a humanoid. Once a model gains motors,…