Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Summary As US-China trade talks were about to begin in July 2025, several US government agencies, law firms and trade groups…
How huge breach started: Drift attackers gained entry via a Salesloft GitHub account Summary New findings from a Mandiant-led investigation show the intrusion that led to the large Drift/Salesloft supply-chain…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary The former head of security at WhatsApp, Attaullah Baig, has filed a lawsuit against Meta alleging the company ignored significant…
Signal Rolls Out Encrypted Cloud Backups, Debuts First Subscription Plan at $1.99/Month Summary Signal has begun rolling out opt-in, end-to-end encrypted cloud backups in its latest Android beta. The free…
Hackers Hijack npm Packages With 2 Billion Weekly Downloads in Supply Chain Attack Summary Security researchers report what may be the largest npm supply‑chain attack to date: attackers injected malware…
Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Summary As US–China trade talks were about to begin in July 2025, several US government agencies, law firms and trade groups…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary Attaullah Baig, the former head of security for WhatsApp, has filed a lawsuit in the U.S. District Court for the…
Hackers Hijack npm Packages With 2 Billion Weekly Downloads in Supply Chain Attack Summary Security researchers and the affected maintainer report a large-scale supply chain compromise of npm packages after…
Signal Rolls Out Encrypted Cloud Backups, Debuts First Subscription Plan at $1.99/Month Summary Signal has started rolling out end-to-end encrypted cloud backups in its latest Android beta. The opt-in feature…
Dev snared in crypto phishing net, 18 npm packages compromised Summary A developer’s npm account was hijacked after falling for a phishing email that prompted a reset of two‑factor authentication.…
