GitHub confirms breach of 3,800 repos via malicious VSCode extension
https://www.bleepingcomputer.com/news/security/github-confirms-breach-of-3-800-repos-via-malicious-vscode-extension/
GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security
https://www.varonis.com/blog/ghosttree-ntfs-trick
London's police asked Big Tech for comms data over 700,000 times last year
https://www.theregister.com/databases/2026/05/20/londons-police-asked-big-tech-for-comms-data-over-700000-times-last-year/5242590
Real-World ICS Security Tales From the Trenches - SecurityWeek
https://www.securityweek.com/real-world-ics-security-tales-from-the-trenches/
New features in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint | Microsoft Learn
https://learn.microsoft.com/en-us/defender-endpoint/whats-new-in-microsoft-defender-endpoint
Webworm: New burrowing techniques
https://www.welivesecurity.com/en/eset-research/webworm-new-burrowing-techniques/
ShinyHunters Goes After Cybersecurity Firm Warning Victims Not to Pay Ransoms | PCMag
https://www.pcmag.com/news/shinyhunters-goes-after-cybersecurity-firm-warning-victims-not-to-pay-ransoms
Microsoft shares mitigation for YellowKey Windows zero-day
https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-mitigation-for-yellowkey-windows-zero-day/
Dominic Chell 👻 on X: "If you’re not up to speed with the risks of malicious vscode extensions, just a reminder, we blogged about this 3 years ago - https://t.co/JSbFwV5NoO @MDSecLabs" / X
https://x.com/domchell/status/2056975089141223659
Exploit released for new PinTheft Arch Linux root escalation flaw
https://www.bleepingcomputer.com/news/linux/exploit-released-for-new-pintheft-arch-linux-root-escalation-flaw/