Cyber Security Microsoft details ChainDrop worm spreading through compromised npm packages Microsoft says ChainDrop used compromised npm packages to steal developer credentials and spread through software supply... CyberOGZ Team Aug 06, 2026 159 views
Cyber Security GitHub restricts npm 2FA-bypass tokens to reduce package supply chain risk GitHub restricted npm 2FA-bypass granular access tokens and plans more publish controls for January 2027. CyberOGZ Team Aug 01, 2026 143 views
Cyber Security GitHub adds publish-time malware scanning and dual-use metadata rules for npm packages GitHub says npm packages will now face malware scanning before install availability, with new disclosure rules for dual-... CyberOGZ Team Jul 29, 2026 213 views
Cyber Security Microsoft frames Black Hat 2026 security agenda around AI and software supply chain trust Microsoft's Black Hat USA 2026 agenda focuses on AI agents, npm supply chain attacks, identity and trusted workflow abus... CyberOGZ Team Jul 19, 2026 156 views
Cyber Security AsyncAPI npm package compromise shows provenance is not a complete supply-chain defense Microsoft, Datadog and StepSecurity detail a July 14 AsyncAPI npm compromise that used legitimate CI releases to ship ma... CyberOGZ Team Jul 16, 2026 162 views
