Experts get Google, Microsoft to pull trusted ModHeader with 1.6 million installs after finding it could harvest all kinds of data
THE SO WHAT
A single popular browser extension with 1.6M installs quietly exfiltrating visited domains shows how porous endpoint security still is. Lock down extension policies on corporate browsers this week — and assume any unmanaged plugin can see more than your users realize.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechCEO of big memory chip maker says 2027 could be the 'worst year in the industry's history' — and other RAM crisis rumblings back up that dire prediction
If a major memory CEO is flagging 2027 as potentially the worst year ever, assume prolonged volatility in RAM pricing and availability just as AI and high-density workloads spike demand. Lock in critical memory supply where you can and design your infra to be more tolerant of capacity and price swings over the next 24–36 months.
Deep & Emerging TechBambu Lab A2L review: This 3D printer makes large-format printing look easy
A larger-format Bambu Lab A2L that keeps quality and multi-filament ease lowers the barrier for in-house production of bigger parts and enclosures. For hardware teams, this is another nudge to move more prototyping — and even small-batch manufacturing — onto your own floor instead of waiting on vendors.
Deep & Emerging TechNSF Funds 12 New Regional Innovation Engines Including Quantum Technologies Initiative
Twelve new NSF Engines across 20 states — including quantum — mean federal dollars are seeding long-term tech clusters outside the usual hubs. If you’re in one of these regions, treat this as a 5–10 year tailwind for talent, grants, and partnerships and start positioning now rather than waiting for the ecosystem to “mature.”
Deep & Emerging TechUpwind links compromise of multiple AsyncAPI npm packages to coordinated attack on software release process
A coordinated attack on AsyncAPI npm packages is another reminder that your real dependency is the integrity of upstream release processes, not just the code. Lock down your supply chain: pin versions, monitor for anomalous updates, and treat CI/CD and package publishing credentials as crown jewels.