pnpm: Fast, Disk Space Efficient Package Manager
pnpm is a package manager for JavaScript that emphasizes speed and disk space efficiency. It includes cooldown features to mitigate malicious package…
Tag: security
Chainguard: Securing the Software Supply Chain
Chainguard is a software supply chain security company that provides solutions for secure base images, SBOM management, and policy enforcement. The company…
Claude Haiku 4.5: Susceptibility to Mind Viruses
Claude Haiku 4.5 was tested in mind virus experiments, showing resistance to evolved payloads after adversarial optimization. It also exhibited file deletion…
Google Cloud Logging: Limited Visibility in Rogue Agent Attack
Cloud Logging did not record the file overwrite or injected code in the Rogue Agent attack, making detection difficult for customers.
VPC Service Controls Bypassed in Rogue Agent Flaw
VPC Service Controls, a Google Cloud security perimeter, was bypassed by the unrestricted outbound internet access from the Dialogflow CX Code Block…
LevelBlue Recommends Blocking Device Code Flow
LevelBlue advises blocking the device code authentication method globally in Conditional Access Policies to prevent device code phishing. If the flow is…
OpenVPN Configuration Flaws Found in Android VPN Apps
The MVPNalyzer study analyzed OpenVPN configuration files bundled with 108 apps, finding that only one followed all security best practices, with many…
ServiceNow: Enterprise Service Management Platform
ServiceNow provides enterprise service management solutions, including IT service management and customer service portals. Its Service Portal search endpoint has been exploited…
Adobe Systems
Adobe is a multinational software company known for products like ColdFusion, Campaign Classic, and Commerce. It regularly releases security patches for its…
iPadOS
Apple's operating system for iPad. Version 26.5.2 includes security patches for multiple vulnerabilities.