Security researchers at Iru have detailed a sophisticated new threat targeting macOS users through the software supply...
supply chain attack
Security researchers at Yeeth Security have uncovered a sophisticated campaign on the Open VSX marketplace, where a...
Security researchers have sounded the alarm on a precision-targeted supply-chain compromise striking the SAP developer ecosystem. The...
Cybersecurity researchers at Panther Threat Research have released a detailed exposé on a massive, coordinated npm malware...
Checkmarx, a global leader in application security testing, has disclosed a significant breach of its internal systems....
Vimeo, the global video hosting giant, announced it has been swept up in a security incident involving...
The password management world was rocked this week as researchers from Socket revealed a major supply chain...
A new report from researchers at TrendMicro has exposed the evolution of Void Dokkaebi (also known as...
The cybersecurity world is facing a sprawling supply chain compromise as official distribution channels for Checkmarx, a...
The Python ecosystem is reeling from a sophisticated supply chain attack targeting Xinference (Xorbits Inference), a widely...
The global development community is on high alert following reports of a major security incident at Vercel,...
Security researchers from the OpenSourceMalware (OSM) team have uncovered a massive and rapidly expanding threat campaign targeting...
A new investigative report from Panther has identified a dangerous cluster of malicious packages lurking within the...
The esteemed open-source library @Axios recently fell victim to a sophisticated supply chain incursion in late March,...
Recently, a research contingent published a scholarly treatise detailing an exhaustive security audit of various API aggregators—commonly...
In the world of secure software development, sandboxing is the ultimate safety net—a controlled environment designed to...
Researchers at Socket have identified a massive new cluster of malicious packages linked to North Korea’s notorious...
Security researchers at StepSecurity have sounded the alarm on a compromised version of the @velora-dex/sdk package. On...
Cisco Talos has revealed a major automated credential harvesting campaign, tracked as UAT-10608, that has already compromised...
The digital defenses of the European Union faced a significant test this March as a sophisticated supply-chain...
The esteemed open-source library Axios, a staple of the contemporary industry, recently fell victim to a cyber...
The cybersecurity world is reeling following reports of a massive data breach at Adobe, orchestrated by a...