Supply Chain Surprises, Travel Hygiene, and Browser-Native Security

News

Palo Alto CDN Bug Allows XSS on 25,000 Websites

A critical flaw in a CDN's systems let attackers inject malicious JavaScript across sites. This is a massive, silent supply chain vector—your site could've been compromised through no fault of your own.

FBI Warns: Don't Put Phone on Hotel Charger or Scanner

The FBI's warning is a sharp reminder that your physical device is a critical security boundary. For anyone traveling for work, especially with company data, this is a simple but high-leverage policy to engrain.

Major Infostealers Rebrand, Launch New Operations

Major infostealers are shedding their old skins and launching new operations under different names. For defenders, it's a reminder that signature-based fails; focus on behavior and credential-hunting patterns.

Tools

Edge's Built-In Editor Gains E2E Encryption Support

Microsoft is baking an end-to-end encryption option directly into Edge's editing tools. This is a big move for secure collaboration, reducing reliance on third-party extensions for sensitive document work.