Attack Surface and Mitigations (Updated July 15)
Executive Summary The security of the npm ecosystem reached a critical inflection point in September 2025. The Shai-Hulud worm, a […]
Reading between the lines of a cyber insurance policy
Enterprises in regulated industries often carry cyber insurance policies because contracts require it or boards ask for documented risk transfer.
Motorola Edge 70 Max looks great, until you check its update policy
TL;DR Motorola’s latest flagship-killer phone will only receive two Android OS upgrades and three years of security updates. The phone
Luring the Python out of its den
Python’s popularity, readable syntax, and extensive third-party library ecosystem make it an attractive target for threat actors seeking to compromise
Apple now lets you pay for cellular iPads over 3 years, and it’s a sign of a pricey trend that won’t halt soon
Apple has introduced 36-month carrier financing for cellular iPads purchased directly from the Apple Store. The option is available through
Claude for Chrome flaw could let rogue extensions access your Gmail
First reported in May, ClaudeBleed is basically a “fake remote control” problem. A sneaky browser extension can pretend to be
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is
Nvidia and Sega are teaming up again, 30 years after Sega saved Nvidia from bankruptcy
Forward-looking: Thirty years after Sega partnered with Nvidia to bring its arcade fighting game Virtua Fighter to PCs running on
Forgotten UEFI shims undermining Secure Boot
ESET researchers identified 11 old and forgotten UEFI shim bootloaders at versions 0.9 and below that can be used to
Threat actor impersonated hundreds of brands on GitHub to push infostealer malware
A financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate