Security JournalThreats, systems & the work of defence Reading index
Reading index

The reading index — Page 7

Source-attributed reporting and analysis on cybersecurity, vulnerabilities, identity and digital defence.

100 articles · Original source dates

Threats & incidents01 Oct 2026

500,000 Active Credentials Left Exposed on GitHub

Truffle Security has discovered over half a million active unique credentials exposed in public GitHub repositories. A total of 1,103,438 exposed credentials were discovered through the scanning of 224 million…

SecurityWeek · 2 min read
Threats & incidents22 Sep 2026

Malicious B-tree NPM Package Accumulates Millions of Downloads

The NPM ecosystem has suffered another supply chain attack in which a malicious package has accumulated millions of downloads, Checkmarx reports. Still ongoing, the campaign has managed to bypass NPM’s recent…

SecurityWeek · 2 min read
Vulnerabilities18 Sep 2026

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft released patches for 18 vulnerabilities on Thursday, spanning its Azure cloud portfolio and Copilot-branded AI products. Elevation of privilege flaws made up the bulk of the disclosures, affecting…

SecurityWeek · 1 min read
Threats & incidents16 Sep 2026

Virtual Event Today: Attack Surface Management Summit

SecurityWeek’s 2026 Attack Surface Management Summit takes place today from 11AM-3PM as a fully immersive virtual event. Join a large community of cyber defenders as we explore how organizations can identify,…

SecurityWeek · 1 min read
Threats & incidents10 Sep 2026

Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox. He says little about his work at the NSA, only that “My first year was on the red team, and in the second…

SecurityWeek · 8 min read
Vulnerabilities21 Aug 2026

Microsoft Patches Exploited Entra ID Vulnerability

Microsoft on Thursday announced the rollout of 22 new security updates that resolve severe vulnerabilities across multiple products, including a critical Entra ID zero-day exploited in attacks. The exploited…

SecurityWeek · 2 min read