By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.

The post NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks appeared first on SecurityWeek.

The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.

The post Iranian Cyber Group Handala Claims Cal Water Hack appeared first on SecurityWeek.

The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.

The post Ivanti Sentry Exploitation Attempts Hitting Honeypots appeared first on SecurityWeek.

The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.

The post Chrome 149 Update Patches 28 Vulnerabilities appeared first on SecurityWeek.