npm ‘accidentally’ removes Stylus package, breaks builds and pipelines
npm has taken down all versions of the real Stylus library and replaced them with a “security holding” page, breaking pipelines and builds worldwide that rely on the…
Author: Cybernoz
Critical Vulnerability in JavaScript Library Exposes Millions of Apps to Code Execution Attacks
A critical security vulnerability has been discovered in the widely-used JavaScript form-data library, potentially exposing millions of applications to code execution attacks. The vulnerability, assigned…
Is it time to rethink the OWASP Top 10?
The Open Worldwide Application Security Project (OWASP) has earned a reputation as a trusted authority in application security. Its most widely recognised contribution, the OWASP…
UK and ChatGPT maker OpenAI sign new strategic partnership
Britain and ChatGPT maker OpenAI have signed a new strategic partnership to deepen collaboration on artificial intelligence security research and explore investment in the country’s…
CISA warns of hackers exploiting SysAid vulnerabilities in attacks
CISA has warned that attackers are actively exploiting two security vulnerabilities in the SysAid IT service management (ITSM) software to hijack administrator accounts. The two…
Lumma Stealer Via Fake Cracked Software Steals Login Credentials and Private Files
The brief lull following May’s multinational takedown of the Lumma Stealer infrastructure proved deceptive. Within weeks, telemetry again lit up with fresh command-and-control (C2) beacons,…
WhatsApp is refused right to intervene in Apple legal action on encryption ‘backdoors’
A court is to hear legal challenges against a secret order issued by the Home Office requiring Apple to give British law enforcement and intelligence…
NBN Co’s new push for 1 million premises to make fibre switch
NBN Co is set to allow over 1 million premises with problem copper lines to upgrade to fibre without buying a more expensive plan, marking…
Trump AI plan calls for cybersecurity assessments, threat info-sharing
Listen to the article 6 min This audio is auto-generated. Please let us know if you have feedback. The U.S. government will expand information sharing,…
Ukraine arrests suspected admin of XSS Russian hacking forum
The suspected administrator of the Russian-speaking hacking forum XSS.is was arrested by the Ukrainian authorities yesterday at the request of the Paris public prosecutor’s office. XSS.is…
Brave Browser Blocks Microsoft Recall by Default Due to Privacy Concerns
A significant privacy protection measure with the Brave browser now blocks Microsoft’s controversial Recall feature by default starting in version 1.81 for Windows users. The…
WhatsApp is refused right to intervene in Apple legal action on encryption ‘backdoors’
A court is to hear legal challenges against a secret order issued by the Home Office requiring Apple to give British law enforcement and intelligence…