All Posts
Get ready for all the horrors and thrills you can handle.
Nx Console: One Stolen Token, One Poisoned Marketplace
TLDR and affected version summary for the Nx Console VS Code extension compromise via a contributor's leaked GitHub PAT.
VoidStealer: Reaching Past Chrome's Encryption
TLDR and details on VoidStealer, an infostealer bypassing Chrome's App-Bound Encryption to extract credentials and session data.
PostgreSQL: Eleven Stitches on a Quiet Afternoon
TLDR and affected version summary for the 11 CVEs patched in the May 14, 2026 PostgreSQL release.
Fragnesia and ssh-keysign-pwn: Two More Bones Under the Kernel
TLDR and affected system summary for Fragnesia (CVE-2026-46300) and ssh-keysign-pwn (CVE-2026-46333).
Shadow Supply: The Package That Stole Your Secrets
TLDR and affected version summary for the node-ipc npm supply-chain compromise.
NGINX: Three Cracks in the Proxy Wall
TLDR and affected version summary for NGINX Rift, CVE-2026-42926, and CVE-2026-42946
Mini Shai-Hulud: The Package That Crawled Through CI
TLDR and affected package summary for the Mini Shai-Hulud npm and PyPI supply-chain campaign.
React and Next.js: Thirteen Doors Left Open
TLDR and affected version summary for the May 2026 React and Next.js security advisories.