GitHub tightens npm security with mandatory 2FA, access tokens

Published on September 23, 2025

GitHub is introducing a set of defenses against supply-chain attacks on the platform that led to multiple large-scale incidents recently. [...]

Continue reading on website
Other news

Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation

September 23, 2025
Big companies are getting smaller, and their CEOs want everyone to know it. Wells Fargo has cut its workforce by 23% over five years, Bank of America has shed 88,000 employees since 2010, and Verizon's CEO recently boasted that headcount is "going down all the time." What was once a sign of corporate distress has become a badge of honor, with executives celebrating lean operations and AI-driven

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

September 23, 2025
SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems.The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of untrusted data that could result in code execution. It affects