June 10, 2026
Angry bug hunter with Microsoft beef drops new Windows 0-day
Revenge is a dish best served code
GitHub pulls pin on npm’s auto-run scripts
Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors
Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9
Remote, unauthenticated RCE with root privileges is about as bad as it gets