Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...
Cybercriminals are now leveraging Microsoft Teams, posing as IT helpdesk staff, to trick employees into revealing credentials ...
Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub ...