Researchers discovered a free download manager site that has been compromised to serve Linux malware to users for more than…
Researchers discovered a new set of malicious packages on the npm package manager that can exfiltrate sensitive developer data. On…
Checkmark researchers have uncovered the first known targeted OSS supply chain attacks against the banking sector. In the first half of…
Threat actors compromised the PyTorch Machine Learning Framework by adding a malicious dependency. The maintainers of the PyTorch package warn…
Threat actors compromised a media company to deliver FakeUpdates malware through the websites of hundreds of newspapers in the US.…
Experts disclosed a flaw in the PHP software package repository Packagist that could have been exploited to carry out supply…
A threat actor used a trojanized installer for the Comm100 Live Chat application to distribute a JavaScript backdoor. Cybersecurity firm…
China-linked threat actors Iron Tiger backdoored a version of the cross-platform messaging app MiMi to infect systems. Trend Micro researchers uncovered a…
Threat actors targeted a large software development company in Ukraine using the GoMet backdoor. Researchers from Cisco Talos discovered an…
The National Institute of Standards and Technology (NIST) has released updated guidance for defending against supply-chain attacks. The National Institute…
This website uses cookies.
