GitHub ~3,800 internal repos compromised through a malicious VS Code extension

EU CRA mandatory vulnerability reporting enters into force September 11, 2026 — what the 24-hour obligation requires

Interesting- What LLM vuln research looks like

Using AI to Secure Its Generated Code Is a Ponzi Scheme

Digital Trap: Iran Uses Selective Internet Restoration to Track and Arrest January Protesters

A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.)

OffensiveCon26 YouTube Playlist released