News World That's Worth

WordPress Launches Official Browser Extension to Streamline Site Admin and Developer Tools WordPress has officially launched its first-party browser extension, designed to streamline site management, declutter the front-end user experience, and provide built-in tools for web developers. The extension introduces several core features aimed at improving daily workflows for creators and site administrators: Admin Bar Management: Eliminates the native black admin bar pinned to the top of logged-in WordPress sites, shifting all admin controls directly into the browser's extension toolbar icon. Users can toggle the toolbar off globally or customize behavior on a per-site basis. Site Detection & One-Click Dashboard Access: The browser icon dynamically indicates whether any visited website is powered by WordPress, as well as whether the user is actively logged into that specific site. For logged-in sites, users can access the /wp-admin dashboard directly from the extension dropdown...

GitHub Hit by Multi-Tier Supply Chain Attack: Hacker Group Compromises 3,800 Internal Repositories via Rogue VS Code Extension In a chilling reminder of the volatility within modern software development pipelines, GitHub has confirmed a security breach affecting its internal infrastructure. A threat actor has successfully infiltrated and exfiltrated data from approximately 3,800 internal repositories . The incident highlights an incredibly sophisticated, multi-tiered Supply Chain Attack that weaponized trusted, mainstream development tools against GitHub’s own engineers. The Three-Tier Poisoning Chain Breakdown The anatomy of this attack reveals a meticulously executed domino effect spanning three distinct layers of the software ecosystem: The Root Infiltration (The TanStack NPM Compromise): The breach originated at the foundational package level, where malicious actors managed to poison a widely used TanStack package hosted on the public npm registry. The Intermediate Carrier (Nx...