Authorities arrest 2 alleged members of prolific hacking group TeamPCP
(arstechnica.com)
1.
2.
Disrupting supply chain attacks on NPM and GitHub Actions
(news.ycombinator.com)
3.
Checkbox Assessments Aren't Fit to Measure Risk
(darkreading.com)
4.
Dependency cooldowns turn you into a free-rider
(news.ycombinator.com)