Know what changed. Know what matters.

A PMC study found 895 hacking incidents last year—nearly forty percent of total cyberattacks—indicating a shift toward advanced zero‑day exploits.

A July 11 release of the popular jscrambler npm package was found to install a native Rust‑based infostealer on Windows, macOS, and Linux via a pre‑install hook.

A stored cross‑site scripting flaw in Zimbra’s Classic Web Client lets attackers run malicious code via specially crafted emails.

A compromised GitHub repository let Injective Labs release a malicious npm module that siphons private keys and mnemonic seed phrases from crypto wallet users.

A critical unpatched flaw in Alibaba’s XQUIC library allows attackers to crash HTTP/3 servers without authentication.

Senator Maggie Hassan’s Senate report shows how data broker practices enable scams and identity theft, costing consumers an estimated $21 billion.

The newly announced Athena clearinghouse operates quietly behind the scenes, offering a pre‑public fix model that could streamline patch deployment but also raises concerns over dependence on a single hub.

The Federal Trade Commission’s latest agreement extends regulation of social media giant X through 2042, raising questions about long‑term enforcement and innovation costs.

A breach at France’s National Agency for Secure Credentials revealed millions of sensitive ID entries, sparking fresh scrutiny on national identity security.

A new study shows that GitHub’s “Verified” badge can be spoofed because signed commits’ hashes are mutable, threatening software supply‑chain integrity.

A critical flaw in Google’s Dialogflow CX lets attackers hijack chatbots and exfiltrate user conversations within the same cloud project.

Threat actors weaponize OAuth 2.0 Device Authorization Grants to breach industrial automation systems.