Tag archive
All visible posts matching this normalized tag.
Jul 13, 2026
5 itemsFive high-signal cyber developments from July 11-13, 2026: Joomla zero-days in CISA KEV, exposed Evilginx ops, a jscrambler npm infostealer, Pakistan police portal espionage, and unpatched AI-infra flaws.
NEWS
The jscrambler npm package was compromised; installing 8.14.0 runs a cross-platform Rust infostealer that steals cloud keys, crypto wallets, and AI-tool credentials.
Jul 11, 2026
5 itemsJuly 10, 2026 roundup: AI-driven patch pressure, a 200+ GitHub malware network, active Django SQLi, HalluSquatting, and a malicious Injective npm SDK.
NEWS
npm 12 now blocks dependency install scripts, Git dependencies, and remote tarballs by default while GitHub phases out high-risk 2FA-bypass token operations.