Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...
The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.
A desktop app that lets users stream any movie, TV series, or anime for free and without ads hit the top of GitHub’s global ...
A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...
Socket raises $60M to expand AI-driven software supply chain security and protect developers from cyber threats worldwide.
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to target government ...
A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At first, it feels like the usual mess. Then you see the pattern: attackers are not always breaking in. They are ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results