Stuff broke again. Not in a movie way. An old tool was left exposed. An abandoned package was abused. A deprecated feature was still running in prod. …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities …
Anyone who has downloaded affected Red Hat packages should investigate immediately. Official Red Hat NPM accounts have been compromised and used to …
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to …
Microsoft’s GitHub temporarily disabled over 70 repositories after they were reportedly compromised by a worm in the latest open source supply chain …
L'organisme en charge des questions de cybersécurité auprès de l'Etat a annoncé qu'elle ne certifierait plus les produits qui sont dépourvus d'un …
Dashlane a été visé par une cyberattaque par force brute, qui a provoqué une montagne de tentatives de connexion frauduleuses. Dos au mur, la société …
“BadHost” was found in Starlette, a package with 325 million weekly downloads. Millions of AI agents and tools around the world have been imperiled by …
Le ver Miasma avait infecté des paquets de Red Hat, puis 73 dépôts de Microsoft en moins de deux minutes. Son arsenal complet vient d'être publié en …
Shadow AI used to mean employees pasting things they shouldn't into ChatGPT. It now means something bigger: employees building full applications with …
CTI Stuffs - Threat Actor Usernames Scraped Edition A collection of CTI stuffs and various intel 📃 I was inspired to make this because corpo threat …
By targeting large numbers of users, attackers increased their chances of success. Dashlane said that attackers mounted a coordinated hacking campaign …
Actualité
