@asyncapi/specs (2.7M weekly downloads) got compromised today via a malicious CI commit

AI-enabled attacks move faster than human analysts can track, at a scale that traditional SOCs weren’t designed to withstand. eCrime breakout times collapsed to 29 minutes on average in 2025, with the fastest clocked at 27 seconds. The rise of frontier AI models is expected to compress the time between vulnerability discovery and exploitation, intensifying…

Governance & Risk Management , Patch Management NightmareEclipse Says Mitigation Can Exhaust Disk Space, Crash Apps Tiffany Wang • July 10, 2026     Image: Microsoft/ISMG An independent security researcher disgruntled with how Microsoft handled vulnerability disclosure on Thursday criticized the computing giant’s patch this week for a zero-day flaw in the Defender security engine…

Identities, permissions, exposed resources, and sensitive data can all contribute to risk regardless of whether they reside in AWS, Microsoft Azure, or Google Cloud. However, security teams often encounter uneven visibility and coverage across disparate cloud environments, and face difficulty in consistently understanding risk across a multi-cloud estate. This month’s CrowdStrike Falcon® Cloud Security…

By Jacob Farmer / jfarmer@chronline.com A veteran’s trip to a Centralia gym took an unexpected turn Wednesday morning when he returned to the locker room to find his pants and jacket had been stolen.  Worse, the pants held the key to his truck, and his wallet.  Centralia police responded to the reported theft at the…

Japanese telecommunications giant KDDI this week confirmed that over 12 million people were affected by a June data breach. The incident occurred on June 17 and involved unauthorized access to a system developed by KDDI as part of the email infrastructure used by five ISPs, namely STNet, JCOM, Chubu Telecommunications, NIFTY, and BIGLOBE. KDDI’s mobile…

Swati KhandelwalJul 06, 2026Cyber Espionage / Endpoint Security Researchers at Shandong University have shown a fast new way to pull data off computers that are cut off from every network. The technique, called TrojPix, tweaks on-screen pixels in ways the eye cannot see, so that the video cable carrying them radiates a faint radio signal a nearby receiver…