Newsroom

Cybersecurity news, advisories and updates

Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.

Showing 1 #software security Remove

Threat advisoriesMedium

GitHub Adds 48-Hour Expiry to Unvalidated npm Trusted Publishing Setups

GitHub now expires unvalidated npm trusted publishing configurations 48 hours after creation, following research showing an attacker could publish new versions of another user's package without stealing credentials.

3 Nov 2026 1 min read 2 viewsThe Hacker News

Trust

Built around the regulators you answer to

SAMA

Saudi Central BankCSF · BCM · CRFR

NCA

National Cybersecurity AuthorityECC-2:2024 · CSCC · CCC

SDAIA

Saudi Data & AI AuthorityPDPL

CMA

Capital Market AuthorityCSG

CST

Communications, Space & Technology CommissionCRF

21regulatory frameworks

Ready to talk about your compliance?

Tell us where you stand. We will show you the shortest path to what your regulator expects.

Book a consultation Explore our services

Cybersecurity news, advisories and updates

GitHub Adds 48-Hour Expiry to Unvalidated npm Trusted Publishing Setups

Built around the regulators you answer to

Ready to talk about your compliance?

Regulatory updates in your inbox