If you build software with VS Code, a trusted extension just became a risk you’ll want to understand and act on today. What happened A compromised version of the Nx Console extension (18.95.0) was published to the Visual Studio Code… Read More »Compromised Nx Console VS Code extension highlights software supply chain risk
If you rely on extensions in your development workflow, a breach in a single tool can ripple through your entire build process. Recently, a compromised version of the Nx Console extension for Visual Studio Code was published to the VS… Read More »Nx Console VS Code Extension Breach Highlights Software Supply Chain Security
Phishing isn’t going away—it’s getting a little smarter. In the last 24 hours, security researchers have pointed to ongoing credential phishing campaigns that mimic familiar services and use convincing login pages to harvest usernames and passwords. The tactics are evolving,… Read More »Phishing campaigns are evolving: practical steps to defend today
Ransomware isn’t just a headline; it’s a reminder that protection isn’t optional, it’s essential—even for huge, well-defended companies. Recent reports show that West Pharmaceutical Services faced a ransomware incident, with the company beginning to restore operations. Details are still evolving,… Read More »Ransomware hits West Pharmaceutical: What it means for you and how to protect
When a token leaks, it can unlock doors you didn’t know were open. Recent reports indicate Grafana Labs faced unauthorized access to its codebase due to leaked authentication tokens. The company says the incident is under investigation and has urged… Read More »Grafana Labs breach highlights token hygiene and supply-chain risk
If you run local AI models, a recent vulnerability in Ollama is a reminder that security touches every layer, from cloud tooling to the software you run on your own hardware. The report describes an out-of-bounds read issue in Ollama… Read More »Ollama vulnerability: what it is and practical steps to stay safe
If you manage any network gear, you’ll want to read this. A Cisco Catalyst SD-WAN Controller authentication bypass vulnerability is being actively exploited in the wild. The details are still evolving as Cisco and researchers publish updates, but the core… Read More »Auth bypass in Cisco Catalyst SD-WAN Controller being exploited: what you need to know
If you manage a business, a small team, or run a project with devices under Fortinet management, you’ll want to read this. A newly disclosed zero-day in Fortinet FortiClient EMS is being actively exploited in the wild. The vulnerability is… Read More »Active Fortinet FortiClient EMS zero-day is being exploited—here’s what you need to do now