Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Any development environment that installed or imported one of the 172 compromised npm or PyPI packages published since May 11 should be treated as potentially compromised. On affected developer workst [...]

Blizzard just made Overwatch’s best mode much worse

While I dabble in other Overwatch modes, I spend the vast majority of my time there in Mystery Heroes, a casual mode in which you load in as a random character and automatically switch to another one [...]

How an Oregon court became the stage for a $115,000 showdown between Meta and Facebook creators

Some of the most successful creators on Facebook aren't names you'd ever recognize. In fact, many of their pages don't have a face or recognizable persona attached. Instead, they run pa [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

Four AI supply-chain attacks in 50 days exposed the release pipeline red teams aren't covering

Four supply-chain incidents hit OpenAI, Anthropic and Meta in 50 days: three adversary-driven attacks and one self-inflicted packaging failure. None targeted the model, and all four exposed the same g [...]

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a [...]

Marvel Snap users are getting a ‘welcome back’ rewards package to make up for the TikTok ban outage

Marvel Snap was one of the unexpected casualties of the TikTok shutdown that briefly went into effect last weekend, and as a way of making things right with users, its developers at Second Dinner are [...]

Discord users' IDs and data compromised in customer service provider hack

One of Discord's third-party customer service providers has been infiltrated by an unauthorized party who was able to gain access to users' information. Discord said it recently discovered t [...]

Russia reportedly implicated in hack on US federal courts' databases

Databases used by US federal courts for sharing and managing case documents have been hacked. Politico first reported on the hack last week on August 6; today, an investigation from The New York Times [...]