Urgent.News

What's breaking now, across thousands of outlets.

Saturday, 19 September 2026 Reading Room

Tech

CrowdSec traces repository theft to TanStack compromise

CrowdSec has said a supply-chain attack involving compromised TanStack npm packages led to the unauthorised copying of about 170 private GitHub repositories after credentials linked to a departing employee were exposed. The cybersecurity company said its investigation, completed with assistance from GitHub, traced the breach to an OAuth token obtained after the employee’s account was compromised…

thearabianpost.com ·

We haven't written up this one. Arabian Post has the full story — the link below goes straight to it.

Read the original at thearabianpost.com →

More in Tech

Never installable

For three days of real-device testing, the app worked, or seemed to. Every test passed. Every review came back clean. On a real phone, it had never once been installable, and nothing had ever said so.

  • App seemed functional during testing but never installable on real phones.
  • Barcode scanning failed due to Open Food Facts database limitations.
  • App reduced dietitians' workload from 120 lookups to 35 searches per week.

·dev.to

Caddy 2.11's default post-quantum key exchange sends six times more handshake bytes

Caddy 2.10 switched on a post-quantum key exchange by default back in April, and I'd assumed, without checking, that "post-quantum" meant "slower". I ran Caddy 2.11.4 against a modern TLS client and measured the handshake instead of guessing.

  • Caddy 2.11 default post-quantum key exchange uses hybrid group X25519MLKEM768
  • Hybrid group increases handshake bytes six times compared to classical X25519
  • Increased byte cost may impact mobile-heavy audiences and slow networks

·dev.to

More from Saturday 19 September →