Keyv, cacheable npm supply chain attack hits 400-plus packages

Laura FrenchAugust 4, 2026

The attack is believed to be related to Mini Shai-Hulud.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Endpoint/Device Security
Precision privilege containment: Eliminating local admin rights without disrupting productivity
Active Directory
The modern path to unified Linux identity security: Securing hybrid infrastructure in a cloud-first world

PODCASTS

Application security
Prompting for Patches That Fix Vulns Without Adding New Ones – Keith Hoodlet – ASW #394
AI/ML
AppSec, Shopify-Style; State of Mobile Security; the News – Andrew Dunbar, Kern Smith – ESW #470
Vulnerability Management
Rogue AI, the Bar, Breaches, BMC, Hugging Face, Helmuth von Multke, Ike, Shieldfont, – SWN #603
AI/ML
Sandwich Hats – PSW #937
Leadership
Transparency, The Key To Team Motivation For Remote Workers – Charles Gaudet – BSW #458

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Researchers find ‘agent-to-agent’ privilege escalation in Google’s ADK for Python repo

Laura FrenchAugust 4, 2026

A low-privileged agent triggered by a PR or issue could be led to manipulate a high-privileged agent.

(Credit: monticellllo – stock.adobe.com)

INC Ransomware chains two SonicWall SMA 1000 zero-days in attacks

Steve ZurierAugust 3, 2026

INC ransomware exploits SonicWall zero-days, prompting compromise fears.

(Credit: daily_creativity – stock.adobe.com)

Anthropic Claude models compromised 3 companies during testing

Laura FrenchJuly 31, 2026

OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.

Biological water treatment plant with a round settlers

Critical Infrastructure Security

Unspecified threat actors targeting US water systems, CISA warns

Steve ZurierJuly 31, 2026

CISA reports surge in cyberattacks targeting water utility PLCs.

Threat Management

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Laura FrenchJuly 31, 2026

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

Cloud solution architecture. An architect's hands select a database icon from a simple palette of holographic cloud services.

Critical Azure Cosmos DB flaw risked cross-tenant compromise

Steve ZurierJuly 30, 2026

Patched Azure Cosmos DB bug threatened Microsoft and customer databases.

ICIT CISO panel

Critical Infrastructure Security

Industry CISOs urge resilience, AI governance and regulatory reform

SC StaffJuly 30, 2026

CISOs urge resilience, supply chain security and simpler cyber rules.

(Credit: ymgerman – stock.adobe.com)

OpenAI agent exploited JFrog Artifactory flaw, abused Modal customer sandbox

Laura FrenchJuly 30, 2026

Hugging Face and OpenAI revealed further details on the agent’s 4.5-day attack campaign.

Events