Recent Advisories

Severity ID Title Vendor Product Date Type
NONE WIRED:FBB28D2ED...

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale_WIRED:FBB28D2ED4667DA2092FC02BA590E531

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of org...

N/A N/A WIRED
HIGH 7.1 THN:69758D49B9D...

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros_THN:69758D49B9DBA748DA17E406DAAF5E65

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCjgJwva2lZrAwxHWPZFiphHAhxBdWRyU4gUiAZIStkUP4JU6yej3Z1xVhUtrhaIYVu4IL5KpvOomBDHU_aL...

N/A N/A THN
NONE WIRED:64D672C82...

The EU Is Going Through a Trump-Fueled Breakup With Big Tech_WIRED:64D672C8269967AB6F6288FA76666B08

France is already moving on from Zoom and Microsoft Teams in favor of homegrown alternatives. Other countries are quickly following suit.

N/A N/A WIRED
NONE THN:387FFDF5ED2...

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension_THN:387FFDF5ED283C36D4B532508CEED359

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ64wgVqZTQx208NgY0sBvUUQcR5mb-G4ENkfw4PEX9KlJJxEI_uUKQvPG0rReXB4chZ3wXrvNSR1QsrK525...

N/A N/A THN
MEDIUM 6.5 THN:C4052E6A3AF...

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks_THN:C4052E6A3AF91D2CC9C9BB647C097470

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyhKX1WKEWbBPd4sElCP9BB26eorxZX1Lo25Mcu-A5bfBUuWT63SQ-Hyycv1YPSlvVeZPfLSEbb8mQnuPvf0...

N/A N/A THN
NONE WIRED:6AA86E804...

A Bipartisan Amendment Would End Police License Plate Tracking Nationwide_WIRED:6AA86E80438522AC4AD16F6730E8961C

One line tucked into a federal highway bill would strip funds from cities and states unless they kill their automated plate tracking programs—effec...

N/A N/A WIRED
NONE H1:3747959

curl: curl –skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write_H1:3747959

## Summary: The curl CLI's `--skip-existing` option performs a separate existence check before the download body is written. In the verified path, ...

N/A N/A HACKERONE
NONE MSSECURE:6D00E9...

Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft_MSSECURE:6D00E966D9372364C645950D0C2319E5

Microsoft has identified an active supply chain attack targeting the _@antv_ node package manager (npm) package ecosystem. A threat actor compromis...

N/A N/A MSSECURE
NONE WIRED:FA398F51B...

A New York Cop Got Injured at a Boxing Match. Now Madison Square Garden Is Banning His Lawyer_WIRED:FA398F51BBA9F45ECD9ED462D51792E0

Attorney John Scola is representing a police officer who is suing over injuries allegedly sustained while working security at an MSG property in 2025.

N/A N/A WIRED
NONE MSSECURE:1D54D2...

Securing the gaming culture of cultures_MSSECURE:1D54D209A555D383D4633CE25EFF8D6A

__The Deputy CISO blog series is where Microsoft _Deputy Chief Information Security Officers_ (CISOs) share their thoughts on what is most importa...

N/A N/A MSSECURE