All posts tagged "supply chain attack"
-
Security
/ 24 hours agoPyPI Packages Deliver ZiChatBot Malware via Zulip APIs
cybersecurity researchers have identified three malicious packages uploaded to the Python Package Index (PyPI) repository. These packages are designed to covertly...
-
Security
/ 3 days agoDAEMON Tools Supply Chain Attack Delivers Malware via Official Installers
A newly identified supply chain attack targeting the popular disc emulation software DAEMON Tools has compromised its official installers to deliver...
-
Security
/ 3 days agoNorth Korean Group Targets Gamers in Supply Chain Attack
A state-sponsored hacking group aligned with North Korea known as <a href="https://delimiter.online/blog/APT37-facebook-rokrat/” title=”ScarCruft”>ScarCruft has compromised a video game platform in a...
-
Security
/ 7 days agoNew Supply Chain Attack Uses Ruby Gems And Go Modules
A new software supply chain attack campaign has been observed targeting development infrastructure. Threat actors deployed so called sleeper packages to...
-
Security
/ 1 week agoPyPI Package Hack Steals Credentials in Supply Chain Attack
A software supply chain attack has targeted users of the popular machine learning framework PyTorch Lightning, with threat actors pushing two...
-
Security
/ 1 week agoDPRK Hackers Use AI-Designed npm Malware in Supply Chain Attack
cybersecurity researchers have identified malicious code hidden inside an npm package that was generated as a dependency by Anthropic’s Claude Opus...
-
Security
/ 1 week agoSAP npm Packages Hit by Credential Stealing Supply Chain Attack
cybersecurity researchers have identified a new supply chain attack campaign that is targeting SAP related npm packages with malware designed to...
-
Security
/ 2 weeks agoWeekly Security Recap: Malware, AI Tracking, and Supply Chain Risks
A series of recurring cybersecurity threats and emerging risks have resurfaced this week, highlighting persistent vulnerabilities in widely used digital systems....
-
Security
/ 2 weeks agoMajor DeFi hack and macOS supply chain threats reported in new bulletin
A new ThreatDay bulletin has reported a significant decentralized finance hack totaling $290 million, alongside escalating threats targeting macOS systems and...
-
Security
/ 2 weeks agoSelf-Propagating Worm Hijacks npm Packages to Steal Tokens
cybersecurity researchers have identified a new series of compromised software packages that are being used to deliver a self-propagating worm. This...

