📰 Daring Fireball

Joseph Cox, reporting for 404 Media: 404 Media is not revealing the exact details of the vulnerability because it can still be exploited as of Monday, when 404

Munsif Vengattil, Aditya Kalra, and Stephen Nellis, reporting for Reuters: Sensitive lists of components and suppliers, ​and photos of Apple’s upcoming iPhone 1

Sean Hollister, writing for The Verge (gift link): If you’ve visited a cannabis club in Spain, [Sammy] Azdoufal says, chances are your photo ID was among them —

Catie McLeod, The Guardian: Trump Mobile said in a statement that it was investigating the issue — “with the assistance of independent cybersecurity professiona

“thenickdude”, on Reddit: They’re using this to detect if you have Creative Cloud already installed when you visit on their website. When you visit https://www.

Samual Axon, reporting last week for Ars Technica: Early this morning, Anthropic published version 2.1.88 of Claude Code npm package — but it was quickly discov

My thanks to Material Security for sponsoring this week at DF. Most security teams don’t have a talent problem, they have a noise problem. Manual phishing remed

StepSecurity: If you have installed axios@1.14.1 or axios@0.30.4, assume your system is compromised. There are zero lines of malicious code inside axios itself,