GitHub Delays Dependabot 3 Days After npm Hijack
GitHub's Dependabot now waits three days before merging updates, a direct answer to the npm hijack that hit chalk and debug packages.
Lawsuits, patent wars, and enforcement actions.
GitHub's Dependabot now waits three days before merging updates, a direct answer to the npm hijack that hit chalk and debug packages.
EPA wants states to decide if data centers' neighbors get any notice before diesel generators go in. Comments close August 21 after a July 22 hearing.
The OCC cleared Upstart's bank charter in under five months, days after denying Wise's — same administration, opposite outcomes, FDIC/Fed pending.
OCC's first trust-charter denial of the Trump era lands on Wise, just months after a $4.2M multi-state AML settlement, with Wise planning to refile.
New Jersey just became the third state this year to outlaw surveillance pricing, and shelf labels using digital tags are frozen too.
Brussels hit Google with its first-ever DMA fine and a 60-day compliance clock, right as Washington threatens to make it a trade war.
A 270-155 House vote loosens merger review and capital rules for small banks, and 28 advocacy groups say it primes the next bailout.
Federal prosecutors want $25 million back from crypto scammers, but chasing the money is easier than chasing the people who stole it.
Consumer advocates just told the Tenth Circuit where a loan is legally 'made' could decide every rent-a-bank fight still pending nationwide.
A Colorado nonprofit tells the en banc Tenth Circuit that roughly 73% of voters already settled this rate-cap fight for out-of-state lenders in 2018.
A Texas federal judge sent Scoular's bribe-paying customs broker to prison for 18 months, days after the company's $10M deal went public.
Seoul's record $422 million fine on Coupang draws Washington pushback, as lawmakers question whether Korea is treating the company fairly.
Italy's DPA didn't buy WindTre's human-error defense: unguarded internal APIs, not the social engineering, drove the €1.7M penalty.
The EU's largest Digital Services Act fine yet accuses AliExpress of giving moderators mere seconds to catch banned toys and cosmetics.
France ordered its internet providers to cut off Polymarket, citing hacked weather sensors and zero identity checks on French bettors.
Treasury's new GOLD EAGLE clearinghouse is voluntary on paper. Examiners have a way of turning voluntary data sources into checklist items.
Coca-Cola's Fairlife brand just became the 17th US cyberattack of 2026, and the SEC's four-day disclosure clock is already running.
20 state AGs told the OCC, FDIC and Fed to kill OppFi's and Enova's bank buys, calling the deals a blueprint for evading rate caps.
Two teens got 5.5 years for a £29M TfL hack, the UK's first conviction under a law meant for critical-infrastructure sabotage, prosecutors say.
DOJ charges a St. Petersburg trio who allegedly rented server space to ransomware gangs, no arrests, just a $10M bounty.