Do Son Read the latest Docker Hub security advisory regarding CVE-2026-105445. Learn how this critical access token vulnerability impacts supply chain security.
Supply Chain
Learn how the LLM-generated PhantomRaven information stealer targets developers. The PhantomRaven information stealer uses npm to hijack CI/CD secrets.
A critical GnuTLS token leak via a GitLab CI artifact exposure put major Linux distributions at risk. Learn how this supply chain vulnerability occurred.
Two Composer vulnerabilities, including CVE-2026-59944, allow directory escape and arbitrary command execution. Update to 2.10.3 or 2.2.30 now.
PHP Composer patched three flaws, including CVE-2026-59948, an arbitrary file write that can run code outside your project. Update to 2.10.2 or 2.2.29.
An iPhone 18 Pro leak from the Tata Electronics breach exposes supplier lists, component details, and device photos on the dark web.
A critical Vitest RCE vulnerability (CVE-2026-53633, CVSS 9.8) has public PoC code. Browser Mode flaw enables config overwrite and remote code execution.
The FCC is banning equipment testing data from China. Discover how this "security" mandate will force Apple, Google, and Samsung to hike prices and delay US launches.
Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!
Apple’s next Mac Studio is reportedly delayed until October. Global memory shortages and a pivot toward MacBook production have left power users in the lurch.
The FCC has banned the sale of foreign-made consumer routers in the US. Discover how this 2026 mandate affects brands like Netgear and your home internet costs.
Ming-Chi Kuo predicts iPhone 18 prices will stay flat in 2026. Discover how Apple plans to absorb rising memory costs to crush its competition.
Apple may return to Intel by 2028 to fab iPhone chips on the 14A node. Discover how NVIDIA's AI boom and U.S. politics are reshaping Apple Silicon.
IDC warns of an "unprecedented" memory shortage in 2026 that could hike smartphone prices by 30%. See how Apple and Samsung are bracing for the hit.
Trust Wallet hit by an $8.5M heist after Shai-Hulud hackers poisoned the NPM supply chain. Binance is fully compensating affected version 2.68 users.
Counterpoint warns: Rising memory costs will drive smartphone prices up by 6.9% in 2026, forcing "spec downgrades" as manufacturers struggle to survive.
Effective Dec 17, 2025: Dell raises commercial product prices by 10–30% due to "unprecedented" memory costs. High-end RAM configs face hikes up to $765.
PyStoreRAT, a new fileless RAT, is spreading via fake GitHub repositories targeting developers. It executes as a JS implant via mshta.exe and includes explicit evasion logic against CrowdStrike.
A malicious Go package typosquat (bpoorman/uuid) operated for four years, using a hidden Valid function to silently encrypt and exfiltrate sensitive data to dpaste.com.
The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack silently installs the NetSupport RAT.
Apple and NVIDIA are fiercely competing for TSMC's next-gen A16/A14 capacity. To mitigate risk, Apple is exploring using Intel's 18AP process for entry-level M-series chips.
Apple is reportedly signing a deal for Intel to manufacture entry-level M-series chips (MacBook Air/iPad Pro) using its 18A process by mid-2027, validating Intel's foundry business.