• GitHub’s npm package firewall can block brand-new versions before they install
• Japan’s GMO Internet Urges Customers to Disconnect PCs
• I underestimated how fast security teams would trust AI to act in the SOC
• Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
• Compromised camera management software gives attackers a way into corporate networks
• 345,000 email addresses stolen in cyberattack on Germany’s far-right party AfD
• AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
• Energy Giant Engie Notifies Customers of Supply Chain Breach
• Upwind secures $400 million to protect AI across endpoints, code, and cloud
• Tailscale fixes SSH flaws allowing lateral movement within tailnets
• Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
• Hackers Infect 953 Online Stores With Scanner-Evading Code
• OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
• Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
• Copenhagen University Breach Compromises Data on Half a Million People
• First ISC2 AI Security Certification Expected for Early 2027
• Watchdog Urges Police and Fire Service to Improve Cybersecurity
• CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
• Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
• Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
• Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw

GitHub announced a package firewall that checks npm packages against an enterprise’s policy before they install. It blocks known malware, critical vulnerabilities, and brand-new versions, and any developer can turn it on by pointing npm at the firewall. The checks run before a package reaches a laptop, a build, or a coding agent. GitHub says AI agents are helping developers build more software, faster, and the firewall is one of four security additions aimed at …