Agree, and we saw this play out with Trivy/TeamPCP recently. One misconfigured workflow, underfunded maintainers, and it spread across five ecosystems in days. £5M split between projects is a start but pretty thin. Hope it sets a precedent though.

anonhaven

Submissions

CIA to embed AI «co-workers» in every analytic platform within two years

New VENOM phishing attacks steal senior executives' Microsoft logins

BreachForums administrator identified as well-known ethical hacker

FBI: Americans lost a record $21B to cybercrime last year

North Korea-linked operators are hunting NPM maintainers behind Fastify, Lodash

LinkedIn scans for 6k Chrome extensions, collects data

Malaysia's age verification rules for social media could be strictest

Solana Drift Protocol drained of $285M via fake token and governance hijack

CISA Adds One Known Exploited Vulnerability to Catalog

Why full-stack post-quantum cryptography cannot wait

NocoBase sandbox escape to root RCE via console object prototype chain

Healthcare Data Breach Statistics – Updated for 2026

£5M Funding for supply chain security innovation in UK

LangDrained: Paths to Your Data Through LangChain

[untitled]

[untitled]

[untitled]

[untitled]

comments