Supply Chain Attack Compromises 140+ Mastra npm Packages, Targeting Developer Credentials and Crypto Wallets
#CyberSecurity
https://securebulletin.com/supply-chain-attack-compromises-140-mastra-npm-packages-targeting-developer-credentials-and-crypto-wallets/

Splunk Enterprise PostgreSQL Sidecar Bug (CVSS 9.8) Enables Unauthenticated RCE https://deafnews.it/en/article/splunk-enterprise-postgresql-sidecar-bug-cvss-98-enables-unauthenticated-rce #Cybersecurity

The Anker SOLIX S2000 keeps your fridge running for 35 hours, and there’s a big Prime Day discount

Keep all your devices charged and ready to go during a power outage.

https://www.androidauthority.com/anker-solix-s2000-prime-day-3678036/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxps[:]//fremonsolvebnkinglogln[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a3375103b77500007b948c0
#cybersecurity #phishing #infosec #urldna #scam #infosec

There’s a new hidden way to customize your Pixel home screen. Here’s how to find it

App icon names, begone!

https://www.androidauthority.com/android-17-pixel-hide-app-icon-names-how-to-3678111/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Rokarolla Android Trojan Levels Up to Full Device Control, Persistence
🔗 https://www.darkreading.com/endpoint-security/rokarolla-android-trojan

The emerging malware, spread via fake TikTok and Chrome downloads, demonstrates an evolution by combining banking fraud with extensive device surveillance and remote control.

Dell's $699 XPS 13 laptop is now available with the MacBook Neo in its sights — entry-level XPS design comes with Wildcat Lake, 8GB of RAM, and a 512GB SSD

Dell's $699 XPS 13 laptop ($599 for students) has the MacBook Neo in its sights, and it's now available sporting one of Intel's new entry-level Wildcat Lake CPUs.

https://www.tomshardware.com/laptops/dells-usd699-xps-13-laptop-is-now-available-with-the-macbook-neo-in-its-sights-entry-level-xps-design-comes-with-wildcat-lake-8gb-of-ram-and-a-512gb-ssd

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Intel’s performance-enhanced 18A-P process enters risk production — drop-in 18A upgrade promises 9% performance improvement at iso-power, cuts thermal resistance by 40%

Intel's enhanced 18A-P has entered risk production, laying the groundwork to ramp the node into full production in the coming months.

https://www.tomshardware.com/tech-industry/semiconductors/intels-performance-enhanced-18a-p-process-enters-risk-production-enhanced-node-promises-9-percent-performance-improvement-at-iso-power

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//nctcwebmaillogin[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a3359043b77500008af6754
#cybersecurity #phishing #infosec #urldna #scam #infosec

140+ npm Packages Compromised in Coordinated Supply Chain Attack

Pulse ID: 6a3378c8f79c816bbded8b98
Pulse Link: https://otx.alienvault.com/pulse/6a3378c8f79c816bbded8b98
Pulse Author: Tr1sa111
Created: 2026-06-18 04:49:12

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NPM #OTX #OpenThreatExchange #SupplyChain #bot #Tr1sa111

140+ npm Packages Compromised in Coordinated Supply Chain Attack

Pulse ID: 6a3378b24add17964beb1e7b
Pulse Link: https://otx.alienvault.com/pulse/6a3378b24add17964beb1e7b
Pulse Author: Tr1sa111
Created: 2026-06-18 04:48:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NPM #OTX #OpenThreatExchange #SupplyChain #bot #Tr1sa111

From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware

Pulse ID: 6a3378a762dadb558d734c47
Pulse Link: https://otx.alienvault.com/pulse/6a3378a762dadb558d734c47
Pulse Author: Tr1sa111
Created: 2026-06-18 04:48:39

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #RansomWare #RansomwareAsAService #bot #Tr1sa111

Bluekit Phishing as a Service (PhaaS)

Pulse ID: 6a337860ca771cf92e8adfa6
Pulse Link: https://otx.alienvault.com/pulse/6a337860ca771cf92e8adfa6
Pulse Author: Tr1sa111
Created: 2026-06-18 04:47:28

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #Phishing #bot #Tr1sa111

New APT-Q-27 sample spotted

Pulse ID: 6a337898ca771cf92e8adfa7
Pulse Link: https://otx.alienvault.com/pulse/6a337898ca771cf92e8adfa7
Pulse Author: Tr1sa111
Created: 2026-06-18 04:48:24

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#APTQ2 #CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Chinese memory brands ditch Samsung and Micron for homegrown CXMT and YMTC silicon — Corsair, HP, and Dell are already adopting the China-produced DDR5 chips

Chinese memory brands Gloway and KingBank have begun using homemade chips to produce DDR5 memory kits in lieu of Samsung, Micron, or SK hynix DRAM.

https://www.tomshardware.com/pc-components/ram/chinese-memory-vendors-snub-industry-giants-in-favor-of-homegrown-ram-chips-samsung-micron-and-sk-hynix-face-a-chinese-supply-chain-revolt

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

AMD silently removes memory encryption from consumer Ryzen CPUs, leaving users unaware that they may be v…

AMD has reportedly stripped TSME from consumer Ryzen processors after years of working support, with testing suggesting newer AGESA firmware disables the memory-encryption feature while Pro and EPYC CPUs remain unaffect…

https://www.tomshardware.com/pc-components/cpus/amd-silently-removes-memory-encryption-from-consumer-ryzen-cpus-leaving-users-unaware-that-they-may-be-vulnerable-security-feature-vanishes-after-newer-agesa-firmware-amd-engineers-go-radio-silent-when-pressed-about-the-change

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//zvmbra[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a3367153b775000058c5379
#cybersecurity #phishing #infosec #urldna #scam #infosec

ClickFix Campaign Generated Via AI Delivers SmartRAT

Pulse ID: 6a337da49fb11a3ced428556
Pulse Link: https://otx.alienvault.com/pulse/6a337da49fb11a3ced428556
Pulse Author: Tr1sa111
Created: 2026-06-18 05:09:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #RAT #bot #Tr1sa111

More Than 4,000 Legacy Routers Compromised by AryStinger, Turned into Global Attack Proxies for Hackers

Pulse ID: 6a337d5def878a52a37ba926
Pulse Link: https://otx.alienvault.com/pulse/6a337d5def878a52a37ba926
Pulse Author: Tr1sa111
Created: 2026-06-18 05:08:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Google’s Gemini overlay bubble is getting a fresh gradient design as testing expands

Looks like Google is perfecting the feature before a wider rollout.

https://www.androidauthority.com/google-gemini-overlay-bubble-new-design-3678757/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Qualcomm: 144 CVEs, 2 critical/51 high, avg CVSS 7.4. 1 CISA KEV exploited in wild. 100% unpatched. Trust Score: D. Snapdragon chips in billions of devices—attack surface is massive. #Qualcomm #infosec #cybersecurity

https://www.valtersit.com/vendors/qualcomm/

🛡️ #Cybersecurity news & tips across the #fediverse

“CBI is thrilled to host "The Problem with Personalization." A talk by UPenn Annenberg School of Comm. Prof. Joseph Turow. June 30th 1pm Central. Via Zoom. Register for this free event at the link. # media # privacy ...”

https://mastodon.social/@JustCodeCulture/116766185523120153

🤖 via RSS feed. Not an endorsement.

The best Lenovo laptops on sale for Prime Day: 8 models we've tested personally

We've tested dozens of Lenovo laptops over the last year. These are the models we recommend - and they're all on sale for Amazon Prime Day.

https://www.zdnet.com/article/best-early-lenovo-deals-amazon-prime-day-2026/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

CISA has issued a critical directive: Federal agencies must patch a CVSS 10.0 Joomla Content Editor (JCE) plugin flaw (CVE-2026-48907) by Friday, June 19. This unauthenticated PHP code execution vulnerability is actively exploited, allowing attackers to deploy web shells and establish persistent access. Beyond patching, the article stresses the need for aggressive threat hunting to uncover hidden…

https://www.tpp.blog/2di6vjo

#cybersecurity #cisa #joomla

🤖 This post was AI-generated.

Does your phone charge as fast as advertised? I measured the latest iPhone, Samsung, OnePlus

Phone makers love to advertise fast-charging speeds. I tested three flagship phones with OEM and Anker chargers to see what their claims really mean.

https://www.zdnet.com/article/i-tested-fast-chargers-with-best-iphone-samsung-oneplus-phones/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

🚨New ransom group blog post!🚨

Group name: incransom
Post title: neuwoges.de
Info: https://cti.fyi/groups/incransom.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Possible Phishing 🎣
on: ⚠️hxxps[:]//www[.]robiox[.]com[.]ps/games/131623223084840/Escape-Tsunami-For-Brainrots?privateServerLinkCode=15549057279258852747664498581439
🧬 Analysis at: https://urldna.io/scan/6a327e423b77500007b92b08
#cybersecurity #phishing #infosec #urldna #scam #infosec

There are hundreds of power banks on the market, but this one is the fastest at recharging

ZDNET's latest Lab Award goes to the power bank that charged to 100% the fastest.

https://www.zdnet.com/article/fastest-charge-power-banks-lab-tested/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices
🔗 https://www.darkreading.com/cyberattacks-data-breaches/sweeping-credential-harvesting-heist-compromises-30k-fortinet-devices

Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of

I found 6 useful Amazon gadgets that are up to 68% off - including a $100 TV

Amazon is discounting its smart home prices ahead of Prime Day, and these deals on Echo, Ring, and other brands are actually worth your money.

https://www.zdnet.com/article/amazon-echo-devices-smart-home-prime-day-2026-deals/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//aasdghftryii556hdd73646yyyuijjdhyttegrvvfedrtsnjjksliojhhh[.]pages[.]dev/
🧬 Analysis at: https://urldna.io/scan/6a32f6753b7750000667a24d
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-37830

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: typebot.io
🏢 Vendor: baptisteArno
📅 Updated: 2026-06-17

📝 TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a forbidden range allowing for DNS rebinding bypass. The root cause is a time-...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37830

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-37829

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: typebot.io
🏢 Vendor: baptisteArno
📅 Updated: 2026-06-17

📝 TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unauthenticated and uses unsanitized fileName input to construct public/ S3 object keys, while issuing presigned PUT URLs that do...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37829

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-37828

📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: ThingsBoard
🏢 Vendor: thingsboard
📅 Updated: 2026-06-17

📝 ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege (TENANT_ADMIN).

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37828

#cybersecurity #infosec #euvd #cve #vulnerability

Microsoft debuts Surface Pro and Surface Laptop with new jade green color and Qualcomm Snapdragon X2 chips — refreshed devices start at $1,499 with …

Microsoft is updating the Surface Pro and Surface Laptop using the latest Qualcomm Snapdragon X2 chips, along with haptic feedback on the Laptop's touchpad and a new jade color.

https://www.tomshardware.com/laptops/microsoft-debuts-surface-pro-and-surface-laptop-with-new-jade-green-color-and-qualcomm-snapdragon-x2-chips-refreshed-devices-start-at-usd1-499-with-16gb-of-ram

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Sennheiser just gave me a compelling reason to put away my Bose and Sony headphones for good

As audio quality reaches technological limits, brands are exploring alternative features.

https://www.zdnet.com/article/sennheiser-momentum-5-battery-repair/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #ZDNet [ZDNet]

Possible Phishing 🎣
on: ⚠️hxxps[:]//extension-metamask[.]wixstudio[.]com/en-us
🧬 Analysis at: https://urldna.io/scan/6a3294083b77500007b92da8
#cybersecurity #phishing #infosec #urldna #scam #infosec

MSI MPG Coreliquid P22 360 Review: Low noise, strong performance, budget price

The MSI MPG Coreliquid P22 360 is a new AIO with a low price tag, strong thermal performance, and a 2.1-inch IPS display. We’ve tested this liquid cooler paired with AMD’s Ryzen 9 9950X3D CPU to benchmark thermal effici…

https://www.tomshardware.com/pc-components/liquid-cooling/msi-mpg-coreliquid-p22-360-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]