Censys reported that over 380,000 internet-exposed hosts are still referencing the malicious polyfill.io domain.
The polyfill.io domain was suspended last week following multiple reports …
Rapid7 researchers warned that threat actors added a backdoor to the installer for the Justice AV Solutions JAVS Viewer software.
The attackers were …
Enlarge / Internet Backdoor in a string of binary code in a shape of an eye. (credit: Getty Images)
Researchers have found a malicious backdoor in a compression tool that made its way into widely used Linux distributions, including those
Enlarge (credit: Getty Images)
GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency from developer devices, researchers said.
The malicious repositories are
Threat actors pushed a malicious version of the “@ledgerhq/connect-kit” npm module developed by crypto hardware wallet maker Ledger, leading to the …
The National Cyber Security Centre (NCSC) and Korea’s National Intelligence Service (NIS) released a joint warning that the North Korea-linked …
Microsoft Threat Intelligence researchers uncovered a supply chain attack carried out by North Korea-linked APT Diamond Sleet (ZINC) involving a …
The maintainers of Free Download Manager (FDM) confirmed that the recently discovered supply chain attack dates back to 2020.
Recently, researchers from …
Researchers from Kaspersky discovered a free download manager site that has been compromised to serve Linux malware. While …
On July 31, 2023, Phylum researchers observed the publication of ten different “test” packages on the npm package manager that were …
On July 31, 2023, Phylum researchers observed the publication of ten different “test” packages on the npm package manager that were …
In the first half of 2023, Checkmarx researchers detected multiple open-source software supply chain attacks aimed at the banking sector. These attacks targeted specific …
Enlarge (credit: Getty Images)
Hackers working on behalf of the North Korean government have pulled off a massive supply chain attack on Windows and macOS users of 3CX, a widely used voice and video calling desktop client, researchers from multiple