Malicious npm Packages That Evade Defenses
Severity: HighAction: Be aware
Web & App Security
OWASP, APIs, authentication, supply chain and DevSecOps.
All Web & App Security stories
EDR Evasion Stack Helps Process Injection Slip Past Defenses
Severity: Informational
Chrome for Android Update
Severity: ElevatedAction: Be aware
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Severity: ElevatedAction: Be aware
Early Stable Update for Desktop
Severity: ElevatedAction: Be aware
Chrome Beta for Android Update
Severity: ElevatedAction: Be aware
Chrome Beta for iOS Update
Severity: ElevatedAction: Be aware
Chrome Beta for Desktop Update
Severity: ElevatedAction: Be aware
Chrome for Android Update
Severity: ElevatedAction: Patch
Extended Stable Update for Desktop
Severity: ElevatedAction: Be aware
Stable Channel Update for Desktop
Severity: CriticalAction: Patch
Chrome Stable for iOS Update
Severity: ElevatedAction: Be aware
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
OpenPLC Runtime v3
Severity: HighAction: Review
lwIP (Lightweight IP)
Severity: HighAction: Mitigate
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Severity: HighAction: Be aware
Long Term Support Channel Update for ChromeOS
Severity: Informational
How AI Agents Can Trigger Runaway Costs for Enterprises
Severity: Informational
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
Severity: HighAction: Be aware
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVE-2026-76460) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV