Skip to content
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package… 

Stop using three monitor stands. Use this triple arm (now 20% off)

Stop using three monitor stands. Use this triple arm (now 20% off)

NOW 20% OFF Huanuo Triple Monitor Mount View Deal (function () { document.querySelector(“#sticky-promo-block a”).addEventListener(“click”, function(e) { const debug = document.location.host.search(/lndo.site|go-vip.net/) !== -1; const text = this.closest(“#sticky-promo-block”).querySelector(“p.promo-title”).textContent; const data = { event: “stickyConversionUnitClick”, eventCategory: “Sticky Conversion”,… 

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

Ravie LakshmananOct 13, 2026Data Privacy / Compliance The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying ​Grindr users’ sensitive data to advertisers.… 

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

The Hacker NewsOct 13, 2026Artificial Intelligence / Identity Security The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance,…