Open a fresh Node.js project in August 2026 and the first decision you make isn’t a framework or a database. It’s which command installs your dependencies. npm still ships in the box with every Node.js download. pnpm just pushed a major version bump to 12.1.0 and quietly became the most-downloaded package manager on the npm…
A cybercriminal operating under the alias “TheHatman” is selling roughly 3.6 million employee-directory records allegedly pulled from the Microsoft Azure and Entra ID tenants of nine large companies, according to cybercrime intelligence firm Hudson Rock. The victim list includes McDonald’s, Vodafone, Tata Consultancy Services (TCS), Kyndryl, HCL Technologies, InterContinental Hotels Group (IHG), Gap Inc., Hexaware…
A threat actor broke into the release pipeline of one of the most widely used open-source security tools on the planet, and the tool at the center of it was itself a vulnerability scanner. On March 19, 2026, attackers used compromised credentials to push a malicious build of Trivy, Aqua Security’s open-source container scanner, then…
Credential stuffing has quietly become the default way attackers break into APIs. Bots armed with billions of leaked username-password pairs no longer bother guessing passwords character by character — they replay credentials stolen from other breaches, betting that people reuse logins across services. According to an authentication threat report published by MojoAuth, defenders blocked 4.2…
Kubernetes clusters waste money in a very specific way: they hold onto nodes that pending pods no longer need, and they lean on Cluster Autoscaler’s coarse-grained node group logic instead of picking the right instance for the job. Karpenter, the open source node provisioning project originally built by AWS, fixes both problems by launching exactly…
DOS gaming never really died, it just moved into three competing forks of the same open-source project. DOSBox, the original emulator that has powered digital re-releases on GOG and Steam since the mid-2000s, has not shipped a new stable build since June 2019. In the vacuum, two active forks took over: DOSBox-X, a monthly-release project…
Three companion chatbots now dominate the AI relationship category, and their 2026 pricing tells three completely different stories. Character.AI charges $9.99 a month for its only paid tier. Nomi AI sits in the middle at $15.99 a month. Replika, meanwhile, quietly rolled out a $120-a-month Max tier this year, on top of its existing $19.99…
Street Fighter 6 and Tekken 8 have pulled arcade sticks back into the mainstream, and the shopping decision in August 2026 comes down to three very different machines. The Hori Fighting Stick Alpha is the $199.99 tournament standard that Sony itself licensed for PS5. The Qanba Titan sits in the middle at $179, built from…
McKesson Corporation, the pharmaceutical distribution giant that moves roughly a third of the prescription drugs sold in the United States, confirmed on August 28, 2026, that it suffered a cybersecurity incident involving unauthorized access to third-party applications and theft of data. Hours after the disclosure, the extortion group ShinyHunters told BleepingComputer it had pulled roughly…