The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Mini Shai-Hulud caught spreading credential-stealing malware Continue reading The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Collaborate Disseminate
Mini Shai-Hulud caught spreading credential-stealing malware Continue reading The never-ending supply chain attacks worm into SAP npm packages, other dev tools
KnowBe4 says 86% of phishing it tracked used AI, and inboxes are only the start Continue reading Bot her emails: most modern phishing campaigns are AI-enabled
One alleged cyber contractor was extradited to the US over the weekend Continue reading FBI cyber boss: China’s hacker-for-hire ecosystem ‘out of control’
This CVSS 10.0 RCE vuln has been patched, automatically for some, so better check those workflows Continue reading Google’s fix for critical Gemini CLI bug might break your CI/CD pipelines
Two computer crime allegations follow up to 18M lines of data surfacing online Continue reading French prosecutors link 15-year-old to mega-breach at state’s secure document agency
Turns out the real problem is not AI but staff still clicking on dodgy emails from ‘IT support’ Continue reading Nearly half of UK businesses pwned last year as phishing keeps doing the job like it’s 2005
Just in time for the Trump-Xi summit Continue reading What type of ‘C2 on a sleep cycle’ do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia
Emergency patches out now for those managing the millions of domains assumed to be affected Continue reading Bug of the year (so far): Nasty cPanel vulnerability probably exploited as a 0-day
Great idea, guys. Let’s keep all of the data in an Excel file with weak password protection Continue reading Finance company stores DB credentials in helpfully labeled spreadsheet
Patches land for authencesn flaw enabling local privilege escalation Continue reading Linux cryptographic code flaw offers fast route to root