Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 3 weeks, 2 days ago

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains

The Hacker News 25 Jun 2026, 12:48 a.m. Incident · 2 stories Apache Compromise Flaw Github Google Microsoft Open Source Research Supply Chain

The Hacker News 1 month, 4 weeks ago

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of the ongoing Mini Shai-Hulud attack wave

The Hacker News 19 May 2026, 4:54 p.m. Apache Compromise Node.js Research Supply Chain

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account