Cybercrime | News, how-tos, features, reviews, and videos
Explore related topics
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems.
Treat this as an immediate security incident, CISOs advised; researchers say it’s one of the most sophisticated supply chain attacks they’ve seen, and it’s spreading.
Report from Wiz also says developers are uploading extensions that include access tokens and other secrets.
A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially hiding in plain sight in embedded QR codes.
Process improvements and a closer look at funding streams will provide far more protection for the open source software we depend on than isolated guardrails.
Scheduled for rollout starting in September 2026, the program aims to restrict malware distribution by requiring developer verification for apps installed on Android devices.
Phishing attacks on package maintainer accounts led to infected JavaScript type testing utilities.
Attackers use typo-squatting, obfuscation, and fake accounts to slip Python-based malware into open-source projects, raising fresh alarms for OSS supply chain security.
“Chimera-sandbox-extensions” exploit highlights rising risks of open-source package abuse, prompting calls for stricter dependency controls and DGA malware detection.
Malicious extensions that install a cryptominer were released just as the weekend started.
CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.
Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.
LLMs could be exploited to launch waves of “package confusion” attacks, first major study into package hallucination finds.
Join us for this webinar from Elastic, featuring a guest speaker from IDC, where a pair of experts will outline market trends for AI in financial services.
The post Timely trends and advice for Financial Services IT leaders for AI success appeared first on Whitepaper Repository -.