Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

A supply chain attack is actively spreading through the npm registry by abusing a file most security tooling never looks at: binding.gyp. Instead of relying on the well-monitored preinstall or postinstall lifecycle scripts, the malware ships a weaponized binding.gyp that triggers node-gyp to execute attacker-controlled code automatically during npm install.

Redis Use-After-Free Remote Code Execution Vulnerability (CVE-2026-23479)

In May 2026, Redis disclosed a high severity memory safety vulnerability tracked as CVE-2026-23479. The issue affects the Redis server, a widely deployed in memory data structure store used for caching, messaging, and real time analytics across cloud and on premises environments. The vulnerability exists in the client unblocking logic and may allow an authenticated attacker to achieve remote code execution under specific conditions.

OWASP APTS: A Complete Guide to Autonomous Penetration Testing Standard

Autonomous pentesting platforms are sitting at the top of HackerOne’s US leaderboard, surfacing zero-days in systems that had passed traditional audits for years. The capability is real, it is here, and it is only getting faster. But CISOs and procurement teams are not rushing to deploy it.

Cybersecurity Challenges and Opportunities Across APAC w/ Henson Yem - The 443 Podcast - Episode 373

Recorded live at WatchGuard’s Impact Partner Conference in Bali, Indonesia, this episode features Henson Yem, CIO and Technical Services Director at Tang Technology. Henson joins Marc Laliberte and Corey Nachreiner to discuss the evolving cybersecurity landscape across Australia and APAC, including emerging threats, the growing impact of AI, and the challenges organizations face in strengthening their security posture. The conversation also explores how MSPs can help customers build resilience, improve security maturity, and navigate an increasingly complex threat environment.

The Hidden Economics of the Agentic SOC

The conversation around AI in cybersecurity is changing. The first question was whether AI could help security teams move faster. It can. AI-led security operations can accelerate investigations, correlate signals, reduce manual work, and help defenders respond at the speed modern threats demand. But as AI moves from experimentation into production, the next question becomes harder: can organizations operate it at scale without creating a new cost problem?

Prompt injection protection: Detecting and blocking malicious AI instructions

Author: Alexander Ivanyuk, Senior Director, Technology Generative AI changes how people work with information. A user can ask a question, upload a document, summarize a ticket, draft an email or ask an AI assistant to help with a workflow. That is useful because the interaction feels natural. But the same natural-language interface also creates a new security problem: instructions and data can become mixed together.

How CISOs should evolve training and readiness with Bobby Ford

Join us for this week's Defender Fridays as Bobby Ford, Chief Strategy and Experience Officer at Doppel, breaks down how AI is amplifying social engineering attacks across every channel and what CISOs need to do differently to get ahead of the threat. At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.

Identity in the SOC: Why network visibility still matters in the age of the identity perimeter

Long gone are the days where usernames were all you needed to secure a network. The same is true for your Security Operations Center (SOC) analysts trying to investigate a threat. "Who is jdoe05 and why are they logging into this server?" is a critical question to answer during an investigation, one that neither NDR (Network Detection and Response) nor EDR (Endpoint Detection and Response) can answer directly. Enter the Identity Provider (IdP).

Mythos access may be limited, but banking threats are there for all to see

Originally published in Vancouver Tech Journal, June 2, 2026. Bijan Sanii is CEO and founder at INETCO It may seem reassuring that JPMorganChase, the largest U.S. bank, is among the 12 launch partners involved in Anthropic’s Project Glasswing. But given the stark cybersecurity warning the initiative represents, including a single financial institution is nowhere near enough.