Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets

The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM ...
WeLiveSecurity

MuddyWater: Snakes by the riverbank

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.
GitHub

Welcome to the GitHub Annotation Toolkit

The GitHub Annotation Toolkit is a Figma asset library packed with components to help you organize your design canvas, diagram UI anatomy, and annotate accessibility details. Whether you’re a designer ...
GitHub

Open or Create File Obsidian Plugin

This plugin allows adding custom Obsidian commands that create or open files based on predefined patterns, making it easier to maintain daily notes, weekly plans, and other regularly used documents.
CSOonline

Malicious npm package sneaks into GitHub Actions builds

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious artifacts under GitHub’s own name. A ...
The New York Times

Aircraft Carrier Moves Into the Caribbean as U.S. Confronts Venezuela

The carrier’s arrival bolsters the extensive deployment of American forces in the region. Britain has ceased sharing some intelligence with the United States because of concerns over boat strikes. By ...