Skip to main content

PostHog admits Shai-Hulud 2.0 was its biggest ever security bungle

3 months ago
Automation flaw in CI/CD workflow let a bad pull request unleash worm into npm

PostHog says the Shai-Hulud 2.0 npm worm compromise was "the largest and most impactful security incident" it's ever experienced after attackers slipped malicious releases into its JavaScript SDKs and tried to auto-loot developer credentials.…

Carly Page

GrapheneOS bails on OVHcloud over France's privacy stance

3 months ago
Project cites fears of state access as cloud sovereignty row deepens

French cloud outfit OVHcloud took another hit this week after GrapheneOS, a mobile operating system, said it was ditching the company's servers over concerns about France's approach to digital privacy.…

Richard Speed

GPUs aren't worth their weight in gold – it just feels like they are

3 months ago
Nvidia's accelerators look pricey, but bullion still wins on cost per ounce

For as long as I have been a reporter and analyst in the IT sector, November has always been supercomputing month. Way before there was a TOP500 ranking of supercomputers in June 1993 but just as I was leaving university, the first Supercomputing Conference was held in Orlando in 1988. And that November SC show set the cadence for high-performance computing for the decades that followed.…

Timothy Prickett Morgan

OBR drags in cyber bigwig after Budget leak blunder

3 months ago
Ex-NCSC chief Ciaran Martin asked to examine how forecast ended up online ahead of schedule

The Office for Budget Responsibility (OBR) has drafted in former National Cyber Security Centre (NCSC) chief Ciaran Martin to sniff out how its Budget day forecast wandered onto the open internet before the Chancellor had even reached the dispatch box.…

Carly Page