Microsoft

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
Miami Community Newspapers

’26 Florida Python Challenge dates announced, registration now open

I’m excited to announce that the annual Florida Python Challenge is back for 2026. Kicking off on Friday, July 10, at 12:01 a.m., and running until Sunday, July 19, at 5 p.m., registered participants ...
The Hacker News

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...
GitHub

AI-readable usage policy and license template registry for origin-based structural assets.

Origin License Policy Registry defines machine-readable usage policies, reusable license templates, asset-policy bindings, and preservation rules for origin-based structural assets. This repository ...
GitHub

Explore OCI container images without running them.

cek is a command-line utility for filesystem exploration inside OCI container images. It focuses on browsing files, reading contents, and inspecting layer mechanics—without running containers. cek ...