A new wave of the Shai-Hulud PyPI attack is accelerating concerns around open-source supply chain security. … Shai-Hulud Campaign Expands With 23 Malicious PyPI PackagesRead more
open source security
OWASP CVE Lite CLI Brings Developer-First Vulnerability Scanning to the Terminal
A new open-source tool is reshaping how developers approach application security. The OWASP CVE Lite CLI … OWASP CVE Lite CLI Brings Developer-First Vulnerability Scanning to the TerminalRead more
Malicious PyPI Package Exploits Typosquatting to Deploy Backdoor
A malicious PyPI package designed to mimic a widely used Python library has exposed thousands of … Malicious PyPI Package Exploits Typosquatting to Deploy BackdoorRead more
Massive npm Supply Chain Attack Targets Red Hat Packages
A large-scale npm supply chain attack has compromised dozens of official packages under the @redhat-cloud-services scope, … Massive npm Supply Chain Attack Targets Red Hat PackagesRead more
npm Resets Tokens After “Mini Shai-Hulud” Supply Chain Attack
A large-scale software supply chain attack has forced npm to take unprecedented action, resetting thousands of … npm Resets Tokens After “Mini Shai-Hulud” Supply Chain AttackRead more
“CypherLoc” Scareware Attack Targets Millions With Fake Alerts
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … “CypherLoc” Scareware Attack Targets Millions With Fake AlertsRead more
Critical Dify AI Flaws Enable One-Click Account Takeover
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … Critical Dify AI Flaws Enable One-Click Account TakeoverRead more
Malicious NuGet Packages Compromise 64K+ Developer Systems
A stealthy supply chain attack is quietly spreading through the .NET ecosystem, targeting developers and build … Malicious NuGet Packages Compromise 64K+ Developer SystemsRead more
Urgent: Critical Notepad++ Flaw Exposes Private Memory
In the toolkit of any developer or system administrator, Notepad++ is a ubiquitous fixture. Known for … Urgent: Critical Notepad++ Flaw Exposes Private MemoryRead more
KICS Docker Supply Chain Attack: DevOps Secrets at Risk
A new KICS Docker supply chain attack has sent shockwaves through the DevSecOps community—proving once again … KICS Docker Supply Chain Attack: DevOps Secrets at RiskRead more