Blog

2.4M+ VRChat users’ data accessed following cloud breach

No disclosure via official channels, no offer of identity theft monitoring, no problem

Every employee’s password was stored in a single Excel file

The CEO thought this was the best way to deal with some email issues

GitHub pulls pin on npm’s auto-run scripts

Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors

Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9

Remote, unauthenticated RCE with root privileges is about as bad as it gets

AI is making Patch Tuesday (kinda) fun again

Unless you're an admin or vulnerability manager – then you're totally screwed

Miasma worms its way onto GitHub as attack kit goes open source

As if there weren't enough package poisonings to worry about

Copyright © 2026 Lugapel