Cybersecurity

A new strain of the Shai-Hulud npm worm tore through the JavaScript package ecosystem on August 4, 2026, poisoning 444 packages in a matter of hours and hijacking…

Broadcom pushed out a critical security advisory on September 3, 2026, warning that VMware Workstation and VMware Fusion contain two flaws serious enough to let an attacker step…

France’s data protection regulator has landed its first big healthcare fine of the fall. On September 3, 2026, the CNIL hit Hôpital Privé de la Loire, a private…

DaVita, Inc., one of the largest dialysis providers in the United States, has agreed to pay up to $15 million to resolve a proposed class action lawsuit tied…

Hackers broke into the digital controls of U.S. drinking water plants again this year, and this time the federal government is naming the failure point out loud: exposed…

Google shipped an emergency Chrome update on September 3, 2026, patching 12 vulnerabilities including a high-severity flaw already being exploited in the wild. The bug, tracked as CVE-2026-85046,…

Iranian government-linked hackers have widened their targeting of American critical infrastructure, attempting to breach systems tied to water utilities, telecommunications networks and energy providers in the weeks leading…

The FBI’s New Orleans field office has opened a formal inquiry into a dark web marketplace that claims to be selling digital scans of more than 153 million…

We put GoProxies’ new Scraping API under an infrastructure lens: what it takes to collect public web data at volume, where the reliability line really sits, and when…

Anthropic used the rollout of Claude Fable 5.1 and Claude Mythos 5.1 to quietly close a door that security researchers had been warning about for more than a…