Supply Chain Security
Five WordPress plugins were injected with malicious code that creates a new administrative account.
Hi, what are you looking for?
SecurityWeek
Cybersecurity Funding
Software supply chain security startup Lineaje has raised $20 million in a Series A funding round that brings the total to $27 million.
Funding/M&A
Software supply chain security startup Chainguard raises a $140 million Series C round that values the company at $1.2 billion.
CISO Strategy
Judge dismissed SEC lawsuit charging SolarWinds and CISO Timothy Brown with hiding security problems before and after the SUNBURST supply chain compromise.
Supply Chain Security
GitLab issues an advisory for a critical-severity vulnerability that allows an attacker to trigger a pipeline as another user.
Malware & Threats
Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.
Supply Chain Security
More than 100,000 websites are affected by a supply chain attack injecting malware via a Polyfill domain.
Supply Chain Security
Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7's 2024 Attack Intelligence Report suggests that this will change.
Supply Chain Security
The discovery of the XZ Utils backdoor reminds an F-Droid developer of a similar incident that occurred a few years ago.
Supply Chain Security
Urgent security alerts issued as malicious code was found embedded in the XZ Utils data compression library used in many Linux distributions.
Malware & Threats
Maintainers of the Python Package Index (PyPI) repository were forced to suspend new project creation and new user registration to mitigate a malware upload...
Funding/M&A
Los Angeles firmware and software supply chain firm banks $10.5 million in seed-stage funding led by Two Bear Capital.
Vulnerabilities
Intel on Tuesday published advisories covering more than 20 vulnerabilities affecting processors and other products.
Artificial Intelligence
Endpoint Security
Endpoint Security
Artificial Intelligence
Ireland’s Data Protection Commission said it has opened an inquiry into Google’s Pathways Language Model 2, also known as PaLM2.
Artificial Intelligence
