Do Son Learn how a massive malvertising campaign exploited illegal streaming websites to deliver information-stealing malware.
github
Learn about the fraud network of North Korean IT workers exploiting fake profiles to infiltrate U.S. and Japanese tech companies.
Uncover the GitVenom campaign targeting GitHub users with malicious repositories designed to steal credentials and cryptocurrency.
Uncover a sophisticated malware campaign using GitHub's release infrastructure to distribute the dangerous Lumma Stealer Trojan. Learn more.
Beware of a malicious VS Code extension impersonating the Zoom Workspace tool. Learn how this deceptive extension targets software developers and steals sensitive data.
Learn about the recent CrowdStrike phishing campaign that distributed the XMRig cryptominer through deceptive recruitment tactics.
Learn about the dangers of the Banshee Stealer, a sophisticated malware targeting macOS users. Discover how it evades detection and steals sensitive data.
Uncovering the truth about GitHub's star-rating system: a study reveals widespread fraudulent stars manipulating repository popularity.
Explore the details of the $308 million Bitcoin theft by the TraderTraitor threat group. Learn about their social engineering techniques and aliases.
Discover the shocking details of the MUT-1244 cyberattack campaign targeting security professionals and hackers, resulting in the theft of sensitive data.
Beware of a targeted campaign against crypto developers. Learn about the malicious npm packages and the risk they pose to cryptocurrency wallet credentials and sensitive data.
Stay informed about the Skuld infostealer attack on Roblox developers. Learn how to detect and defend against malicious npm packages.
Sysdig TRT uncovers EMERALDWHALE: a large-scale cyber operation stealing cloud credentials by exploiting exposed Git configuration files.
Stay informed about the latest GitHub security updates. Learn about the critical vulnerability, CVE-2024-9487, and how it could potentially bypass authentication.
Stay informed about the latest wave of Lua malware attacks targeting the educational sector and gaming communities.
Unveiling a widespread malware campaign: how attackers disguise cryptomining and cryptostealing malware as legitimate software.
Stay informed about the sophisticated VMConnect cyber campaign targeting developers. Discover the tactics used by North Korea's Lazarus Group.
Enhance collaboration and engagement with NGINX's migration of its open-source development repository to GitHub.
Security researcher Ynwarcs has published an in-depth analysis and PoC exploit code for a critical zero-click CVE-2024-38063
Discover the details of the critical CVE-2024-38063 vulnerability affecting Windows systems and the fraudulent PoC exploits used to spread malware.
Stay informed about the recent disruptions on GitHub. Learn about the major outage and its impact on developers worldwide.
Optimize your vulnerability management with Vuls, an automated solution designed to streamline the process of identifying and patching vulnerabilities.