#security
6 stories taggedsecurity.
WeChat Flaw Allows Account Takeover Through Incoming Calls
Calif researchers built a worm that hijacks WeChat accounts via an incoming call. The target's phone doesn't need to be touched.
White House Enlists Security Firms to Combat International Cybercrime
The U.S. government plans to partner with security companies to target foreign cybercrime gangs, with contracts potentially requiring a $1 million bond forfeited for non-compliance.
Credential-Stealing Worm Spreads Across npm Packages
A worm seeded in a single npm package replicated into hundreds of others on August 4, 2026, with two security firms putting the damage count at different but alarming numbers.
GitHub Slashes Public Bug Bounty Payouts, Reserves Top Rewards for VIPs
From July 27, 2026, GitHub is cutting what it pays public researchers for security finds, while keeping the largest rewards for an invite-only group.
GitHub Tightens Security to Counter Pwn Request Attacks
actions/checkout v7 automatically blocks workflows that pull unreviewed fork code inside pull_request_target events, with backports arriving July 16.
Security Protocols for SMBs Adopting Claude
What security leaders at small and medium-sized businesses actually need to know before they hand anyone a Claude license.