July 2026

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk 2026-07-09 at 20:12 By GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install behaviors […]

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories 2026-07-09 at 20:12 By Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it. This week is full of that kind of

Meta patents ‘creepy’ AI device that tracks wearer’s sighs and laughter, medication intake 2026-07-09 at 19:08 By Thomas Barrabi The patent filing, which was filed on July 2, describes an “apparatus” for “emotional state analysis and real-time fitness coaching.” Meta wrote in part that the device would use insights such as whether the user is

Summer of Clearinghouses 2026-07-09 at 15:46 By Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses 2026-07-09 at 15:46 By Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up 2026-07-09 at 15:26 By AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host