Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view

A critical misconfiguration in Amazon Web Services (AWS) CodeBuild could have allowed complete takeover of the cloud service provider's own GitHub repositories, including its AWS JavaScript SDK, putting every AWS environment at risk

More from The Hacker News 16 Jan 2026, 8:31 a.m. Amazon (company) Amazon Web Services Cloud Disclosure Exposure Fixed Github JavaScript Misconfiguration Service Provider Supply Chain Vulnerability

Failure to match metadata with packaged files is perfect for supply chain attacks The npm Public Registry, a database of JavaScript packages, fails to compare npm package manifest data with the archive of files that data describes, creating an opportunity for the installation and execution of malicious files.…

More from The Register 28 Jun 2023, 8:40 a.m. Abuse Database JavaScript Node.js Supply Chain Vulnerability Warning