Exhibit A(I): ForceMemo: Python Repositories Compromised in GlassWorm Aftermath
The recent compromise of Python repositories in the GlassWorm aftermath raises crucial implications for teams working in security and software development.
Latest
Policy Roast: WhatsApp's View Once Feature Has a Fourth Bypass and Meta Won't Fix It
When 'ephemeral' messaging requires trusting both the platform and every person you message with.
The Docket: Eight-Month Notification Delays Are Not Anomalies Anymore
Three healthcare breaches announced the same week with similar delays. The notification timeline is the second vulnerability.
The Docket: Ubuntu's 30-Day Root Exploit Shows Why Patient Attackers Win
CVE-2026-3888 lets attackers wait 10-30 days for systemd cleanup, then hijack root. Security teams monitoring for fast attacks miss the slow burn.
Policy Roast: JCPenney's AI Makeup Advisor Just Became a $50M BIPA Liability
Virtual try-on tech meets Illinois biometric law. JCPenney faces class action over facial scanning without consent. Again.
Policy Roast: AI Companies Pay $12.5M to Clean Up the Mess AI Created
Anthropic, OpenAI, Google, and Microsoft just funded open source security. Specifically, security from AI-generated vulnerability spam their tools created.
The Docket: When Your Analytics Tool Leaks Everyone's Analytics
Google Looker Studio had nine cross-tenant vulnerabilities that could let attackers run SQL on your databases. Tenable found them. Here's what that means legally.