Malware & Threats
A GitHub Codespaces feature meant to help with code development and collaboration can be abused for malware delivery.
Hi, what are you looking for?
SecurityWeek
Application Security
A new report finds that barely 1% of all SBOMs being generated today meets the “minimum elements” defined by the U.S. government.
Malware & Threats
Norway-based DNV said a ransomware attack on its ship management software impacted 1,000 vessels.
Supply Chain Security
A source code security audit led to the discovery of several vulnerabilities in Git, the widely used distributed version control system.
Data Breaches
Nissan North America told roughly 18,000 customers that their personal information was exposed in a data breach via a third-party provider.
Supply Chain Security
Oracle's Critical Patch Update for January 2023 includes 327 patches, with more than 70 that address critical-severity vulnerabilities.
Malware & Threats
Fortinet warned of three malicious PyPI packages containing code that fetches the Wacatac trojan and information stealer.
Cybercrime
Software supply chain security firm Phylum has identified a malicious attack targeting Python Package Index (PyPI) users with the PoweRAT backdoor and information stealer.
Application Security
Security researchers at Microsoft are flagging ransomware attacks on Apple’s flagship macOS operating system, warning that financially motivated cybercriminals are abusing legitimate macOS functionalities...
Cybercrime
More than a dozen new Mac malware families were discovered in 2022, including information stealers, cryptocurrency miners, loaders, and backdoors, and many of them...
Application Security
Enterprise communication and collaboration platform Slack has informed customers that hackers have stolen some of its private source code repositories, but claims impact is...
Application Security
Last week’s nightly builds of the open source machine learning framework PyTorch were injected with malware following a supply chain attack.Now part of the...
Ransomware
The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.
Management & Strategy
Cybercrime
Nation-State
Data Breaches
CISO Strategy
