GitHub mette fine agli script di esecuzione automatica di npm
Sintesi redazionale: Il worm Shai-Hulud ha sfruttato proprio questo. Meglio tardi che mai, dicono tutti tranne gli autori del malware. Fonte originale: https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
<p>### MOST POPULAR</p><p>### AI</p><p>-<br>ai and ml</p><p>#### OpenAI Codex bombards SSDs with needless write operations, costing millions</p><p>Clumsy logging implementation squirrels away data without regard for cost</p><p>-<br>DATABASES</p><p>#### 21,000 Oracle jobs vanish amid Big Red's big bets on AI</p><p>Annual report reveals workforce fell from 162,000 to 141,000 in a year as company pours billions into datacenter expansion</p><p>-<br>DEVOPS</p><p>#### AWS debuts Lambda MicroVMs with up to 8 hours runtime</p><p>Suitable for running untrusted code, AI agents, or any long-running task</p><p>-<br>systems</p><p>#### Datacenters dip a toe back into waterborne computing despite obvious challenges</p><p>Floating or sub-surface bit barns are all the rage, but unlikely to compete with multi-gigawatt sites</p><p>-<br>Security</p><p>#### OpenAI: Yoo-hoo, look over here, we do that security stuff too!</p><p>A plethora of pwn-prevention, including a 'Patch The Planet' pledge</p><p>### Infosec</p><p>-<br>Security</p><p>#### Russians are posing as Signal support to launch phishing attacks</p><p>PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!</p><p>-<br>Security</p><p>#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack</p><p>PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more</p><p>-<br>Black Hat and DEF CON</p><p>#### DEF CON Franklin project enlists hackers to harden critical infrastructure</p><p>Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included</p><p>-<br>Security</p><p>#### EQT buys majority share in Swiss cybersecurity biz Acronis</p><p>Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified</p><p>-<br>Malware Month</p><p>#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight</p><p>On the plus side, infosec's a good bet for a long, stable career</p><p>### FOSS</p><p>-<br>#### Blast from the past as GIMP 0.54 is revived in Flatpak form</p><p>Retro-computing fun for the nostalgic with first (and last) release to use Motif instead of GTK</p><p>-<br>#### Bcachefs exits experimental status in new 'performance release'</p><p>More Rust, but more trouble with AI slop, too</p><p>-<br>#### France's digital sovereignty push is struggling to escape the Microsoft gravity well</p><p>Nextcloud rollout shows locally controlled storage is one thing; getting users off Office is quite another</p><p>-<br>#### History of CentOS: How a biochemist's Linux hobby project became the enterprise world's default operating system</p><p>When a community came together after Red Hat said Windows was 'probably the right product'</p><p>-<br>#### Netflix wiz creates app to slash AI bills, then open sources it</p><p>Project Headroom could save you big money, too</p><p>-<br>#### OpenBSD 7.9 arrives, a diamond in the rough proud of every sharp edge</p><p>Sixtieth release adds more cores, delayed hibernation, and basic Wi-Fi 6 without losing its ascetic streak</p>