Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...
Process improvements and a closer look at funding streams will provide far more protection for the open source software we ...
The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...
Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...
Stripe iframe skimmer hit 49 merchants in Aug 2024, bypassing CSP to steal cards, driving PCI DSS 4.0.1 updates.
A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...
Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging items. Cybersecurity researchers VirusTotal spotted the malware after adding ...
CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.
In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...
Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...
Oracle has recently announced MySQL AI, a new set of AI-powered capabilities available exclusively in the MySQL Enterprise edition, targeting analytics and AI workloads in large deployments. Concerns ...