Ravie LakshmananMay 23, 2026Software Supply Chain / DevSecOps GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior…
Ravie LakshmananMay 23, 2026Malware / DevSecOps A new “coordinated” supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. “Although…
Spyware attacks on journalists, human rights defenders, and political dissidents are no longer rare or exotic. In early 2025, WhatsApp notified roughly 90 users — many of them journalists and civil society members across Europe…
Ravie LakshmananMay 23, 2026Artificial Intelligence / Vulnerability Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most “systemically” important software across the world…
Ravie LakshmananMay 23, 2026Supply Chain Attack / Malware Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework. The…
TL;DR: Get lifetime access to Microsoft Office Professional Plus 2019 and Windows 11 Pro for just $25.99 (MSRP $428) and upgrade your PC with Word, Excel, PowerPoint, Outlook, and modern Windows productivity features without subscriptions. Trying to work…
TL;DR: This Grade A+ refurbished HP EliteBook 840 G8 comes with 16GB RAM, a 512GB SSD, Wi-Fi 6, and Windows 11 Pro for just $349.99 (MSRP $899.98). IT departments have long favored business laptops over flashy consumer…
Ravie LakshmananMay 23, 2026Vulnerability / Web Security A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an…
Ravie LakshmananMay 23, 2026Vulnerability / Website Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based on…
Summary created by Smart Answers AI In summary: Macworld reports that Apple’s iPhone 18 Pro clear cases are expected to eliminate the large white rectangle that covered most of the iPhone 17 Pro’s back. The…