「Node.js」にセキュリティリリース、12件の脆弱性を修正

「Node.js」のセキュリティアップデートが、6月18日（米国時間）に実施された。今回リリースされたバージョンは、以下の通り。できるだけ早い更新が望ましい。 CVE-2026-48933 ：Node.js WebCrypto AES Integer ...
Microsoft

From package to postinstall payload: Inside the Mastra npm supply chain compromise by ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
InfoWorld

How fuzzy APIs are remaking the web

With the advent of AI-mediated APIs, the era of manually hard-coding every integration between every microservice may be ...
The Hacker News

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

This week’s cybersecurity recap covers Firefox and Chrome bugs, EDR-killer tools, a TV botnet, an OpenBSD flaw, Android ...
theregister

Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

Vercel introduced an open source agent framework called eve at its Ship event in London this week, along with other new features including Passport, an attempt to put employee apps created with AI ...
Tech Times

npm Supply Chain Attack: North Korea Backdoored 144 AI Packages in 88 Minutes

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...
The Amazing Times on MSN

12 remote entry-level jobs that actually pay $25 an hour or more

Twelve remote entry-level jobs pay at least $25 an hour, backed by current Bureau of Labor Statistics data. The post 12 ...