Weekly Cyber Security News 11/06/2026

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

While laudable, I still think many will just allow everything rather than configure complex CI flows. Happy to be proved wrong:

• GitHub announces npm security changes to tackle supply-chain attacks

A little brazen don’t you think? Still, people do full for authority figures:

• If you don”t fall for these extortionists” calls, they”ll show up with USB sticks

Now this is a little cheeky:

• How a USB-connected speaker can infect a PC without ever being touched