Attackers backdoored 32 packages in Red Hat’s official npm scope to steal cloud and CI secrets

Every day, thousands of web applications and APIs are probed, scanned, and exploited by attackers who have...

Hackers published 96 malicious package versions, injected with a credential-stealing worm similar to Mini Shai-Hulud. The post...

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to...

A newly analyzed remote access trojan called PHANTOMPULSE has drawn serious attention for its advanced approach to...

Dashlane’s security systems automatically locked accounts to protect them against the hacking attempts. The post Dashlane Brute-Force...

For a few days, my SANS ISC mailbox is flooded with emails that delivers SVG files. An...