Cybersecurity is not confined to incident reports. This tag follows threats and defenses across software dependencies, cloud platforms, developer tooling, and operational practice. Browse the list below when you want the security angle on those topics, even when security is not the post’s primary category.
For articles organized primarily as security analysis, use the Security category. To follow a particular threat pattern, explore the Supply Chain Security series.
The Lapsus$ hacking group has breached both Okta and Microsoft, exposing critical weaknesses in identity provider security and third-party access management.
The Linux Foundation’s new Alpha-Omega Project, backed by Google and Microsoft, aims to systematically improve the security of critical open source software.
Popular npm packages coa and rc were hijacked to distribute malware, impacting thousands of projects and raising urgent questions about supply chain security.
The OMIGOD vulnerabilities in Azure’s silently-installed OMI agent expose a troubling pattern: cloud providers deploying software on your VMs without your
The critical Confluence Server RCE vulnerability is being actively exploited in the wild, raising urgent questions about the sustainability of self-hosted