Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm packages.
Musk won’t have to give up any money he allegedly saved from delaying disclosure of initial purchase of Twitter stock Sign up for the Breaking News US newsletter email Elon Musk settled the US ...