The issue is now fixed, Bloom Security researcher Golan Myers told CSO. “The npm team confirmed that a fix had been shipped on October 2, introducing a 48-hour expiry for unvalidated Trusted Publishing configurations,” he said. Myers said Bloom has… Read More "Over 1,500 npm packages exposed by Trusted Publishing validation flaw"
This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven’t caught up with 27 Mar 2026 That’s a wrap on the RSAC™ 2026 Conference. For its 35th edition,… Read More "RSAC 2026 wrap-up – Week in security with Tony Anscombe"
The British government has announced a range of new initiatives designed to better protect the nation from emerging AI threats. Speaking at Imperial College London on October 12, AI minister Kanishka Narayan laid out a series of plans, including the… Read More "UK Government Announces Sweeping New AI Security Plans"
An executive asks about a cloud app you’ve never heard of, and a check turns up dozens more that nobody approved. Each one already holds company data, and you have to explain that risk to a budget holder in one… Read More "What is Shadow SaaS? Causes, Risks, and Management Tips"
Dutch-Belgian grocery giant Ahold Delhaize has disconnected some of its systems in response to a cyberattack. In a bare-bones notice on its website, the company revealed that it identified a security issue within its network, triggering incident response. “Our teams… Read More "Cyberattack Prompts Ahold Delhaize to Disconnect Systems"
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that… Read More "Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers"
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan 31 Mar 2026 As March 2026 draws to a close, ESET Chief Security Evangelist Tony Anscombe looks… Read More "This month in security with Tony Anscombe – March 2026 edition"
One-in-five cybersecurity leaders has either called in sick or deliberately booked holiday time off to avoid Patch Tuesday, according to new data from Socura. The MDR specialist polled 500 UK CSOs, CISOs and heads of IT security to better understand their… Read More "Fifth of CISOs Take Time Off to Avoid Patch Tuesday"
A cyberattack hit hundreds of supermarkets across Europe, setting refrigerators and freezers to defrost overnight. Exploiting a vulnerability in refrigeration controllers, hackers reportedly raised temperatures to 50 degrees Celsius (122 degrees Fahrenheit), spoiling food products and causing significant monetary damages.… Read More "Refrigeration Controller Hack Spoils Food Across European Supermarkets"
Fraudsters often target the accounts of the deceased or their grieving relatives. Here’s how to keep the scammers at bay. 01 Apr 2026 • , 5 min. read Can you imagine all of the things you’ll leave behind when your… Read More "Digital assets after death: Managing risks to your loved one’s digital estate"
