The Hacker News

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.

Microsoft patches Exchange Server zero-day exploited in attacks

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web ...

Consumer protection associations, civil groups sound alarm over Ottawa’s ‘catastrophic’ funding cuts

Move is part of a suite of federal cost-cutting measures that aim to eliminate billions in annual government spending by the ...

Miasma worms its way onto GitHub as attack kit goes open source

As if the Miasma situation weren't bad enough, now this weapon is spreading like wildfire. Someone open sourced the entire ...
SecurityWeek

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...

Morning Update: Canada’s social media ban has a catch

Canada has big plans to boot kids off social media. The federal government will introduce legislation today banning anyone ...

Rubrik Advances Identity Resilience Through Strata Acquisition and Identity Roll Forward Innovation

Powered by Rubrik’s acquisition of Strata.io, keeps authentication running automatically when the main IdP goes downIdentity ...
Techlomedia

73 Microsoft GitHub Repos Compromised in Miasma Malware Attack

Microsoft has confirmed that it temporarily removed several GitHub repositories after a large-scale malware campaign ...