ChainDrop compromise spreads across more than 400 npm packages
Microsoft’s August account describes automated package-to-package propagation.
Capvise Media / Stories
Security
Privacy, identity and trust in a connected world.
110 storiesBrowse by month
CaptiveCrunch targets travellers through hospitality networks
Microsoft’s July account was later updated after renewed activity.
Microsoft launches an external alliance for AI red teaming
The July programme funds research across six continents.
Microsoft reports lower Tycoon2FA volumes and rising Teams calls
The July review separates disruption effects from growth in other channels.
CERT-In warns of exploited SharePoint and AD FS flaws
Patch server and identity vulnerabilities immediately.
AsyncAPI compromise triggers code when packages are imported
The July report explains why disabling installation scripts was insufficient.
ACR Stealer campaigns use fake fixes to obtain credentials
Microsoft’s July report examines activity observed from April to June.
Cloudflare adds a dashboard comparing crawler activity with referrals
Publishers can examine bot demand separately from the visitors it sends back.
A quantum-safe deadline starts with a cryptographic inventory
Microsoft’s April and June guidance connects discovery with a 2029 programme target.
A fake Perplexity extension intercepts browser searches
Microsoft says Google removed the reported Chromium extension.
Photo-themed ZIP files target hotel and hospitality staff
Microsoft’s June report follows a campaign observed since April.
Cloudflare opens self-managed OAuth applications to all customers
The broader rollout replaces manually onboarded integrations with scoped consent flows.