● On the wire
I thought my TV needed Ethernet, but Wi-Fi proved me wrong//Amid Increased Scrutiny, ICE Detention and Deportation Data Goes Dark//Scientists use dual-frequency images to explore black hole plasma physics//NAND shortages could finally ease in 2027, but ADATA warns the DRAM crisis may last another 10 years//Firefighters battle major wildfire as thousands of hectares burn in central Spain//UK PM Burnham: ‘We need to be a cost-of-living government’//Un primo agosto senza fuochi d'artificio?//Chandrasekhar and the Limits of Physics, Part 2: Humiliation//Coinbase says ‘low-risk’ config change behind 50-minute July 14 outage impacting trading, card transactions//Viaggi fuori dall’Europa? Come avere Internet senza pagare il roaming//Any Cheaper alternatives to Offsec Cloud Security Training//LG OLED55B56LA a 719€: il 55 pollici OLED con AI e gaming 4K@120Hz è ai minimi su Amazon//Black Hat USA//Italy’s Meloni slams protesters following clashes in Bologna//A cronometro c'è un solo REmco//I thought my TV needed Ethernet, but Wi-Fi proved me wrong//Amid Increased Scrutiny, ICE Detention and Deportation Data Goes Dark//Scientists use dual-frequency images to explore black hole plasma physics//NAND shortages could finally ease in 2027, but ADATA warns the DRAM crisis may last another 10 years//Firefighters battle major wildfire as thousands of hectares burn in central Spain//UK PM Burnham: ‘We need to be a cost-of-living government’//Un primo agosto senza fuochi d'artificio?//Chandrasekhar and the Limits of Physics, Part 2: Humiliation//Coinbase says ‘low-risk’ config change behind 50-minute July 14 outage impacting trading, card transactions//Viaggi fuori dall’Europa? Come avere Internet senza pagare il roaming//Any Cheaper alternatives to Offsec Cloud Security Training//LG OLED55B56LA a 719€: il 55 pollici OLED con AI e gaming 4K@120Hz è ai minimi su Amazon//Black Hat USA//Italy’s Meloni slams protesters following clashes in Bologna//A cronometro c'è un solo REmco//
AsyncAPI npm supply-chain compromise spreads malware through trusted packages
Top story — Actualités

La compromission de la chaîne d’approvisionnement npm d’AsyncAPI propage des logiciels malveillants via des packages de confiance

Des attaquants ont compromis l’organisation npm d’AsyncAPI et injecté du code malveillant dans plusieurs packages largement utilisés, notamment des packages de génération et de spécifications avec plus de deux millions de téléchargements hebdomadaires. Le malware a été वितré via un workflow GitHub Actions compromis et exécuté au moment de l’installation, transformant une mise à jour de dépendance de routine en…

Read the article →
From the newsroom