May 20, 2026 | Podcast
https://infosec.exchange/@rebane2001/116606719764376414 Google briefly made public the technical details of an unpatched security vulnerability in Chromium, the open-source browser engine underpinning Google Chrome, Microsoft Edge, Brave, Opera, and dozens of other...
May 19, 2026 | Podcast
https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w GitHub has confirmed that an employee device was compromised via a poisoned Microsoft Visual Studio Code extension, resulting in the exfiltration of approximately 3,800 internal repositories....
May 18, 2026 | Podcast
https://grafana.com/blog/grafana-labs-security-update-latest-on-tanstack-npm-supply-chain-ransomware-incident Grafana Labs, the company behind one of the most widely deployed open-source observability platforms in the world, has confirmed it was targeted by a...
May 15, 2026 | Podcast
https://thehackernews.com/2026/05/why-agentic-ai-is-securitys-next-blind.html Agentic AI, artificial intelligence systems that can autonomously execute tasks, make decisions, and take actions across digital environments, is already running in production inside...
May 14, 2026 | Podcast
https://www.itnews.com.au/news/usb-stick-opens-windows-bitlocker-drives-in-new-zero-day-625859 A newly published zero-day vulnerability dubbed YellowKey allows an attacker with physical access to a Windows device to completely bypass BitLocker disk encryption using...
May 13, 2026 | Podcast
https://openai.com/index/our-response-to-the-tanstack-npm-supply-chain-attack OpenAI has confirmed it was caught up in a supply chain attack targeting TanStack, a popular open-source library widely used by JavaScript developers to build web applications and data...
May 12, 2026 | Podcast
https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability A security vulnerability that has existed in the Nginx web server for eighteen years has been discovered and disclosed, raising serious concerns about the stability and...
May 11, 2026 | Podcast
To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More...
May 8, 2026 | Podcast
https://www.kaspersky.com/blog/passwords-hacking-research-2026/55743 New research from Kaspersky, released on World Password Day 2026, delivers a wake-up call for organisations still relying on MD5 hashing to protect user credentials. Analyzing a dataset of more than...
May 7, 2026 | Podcast
https://www.cifas.org.uk/workplace-fraud-trends-2025 A alarming report from UK fraud prevention organisation Cifas has revealed that 13 percent of employees either have sold company login credentials in the past year or know someone who has, and an equally troubling...
