More than 30 npm packages under Red Hat’s ‘@redhat-cloud-services’ namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, […]
CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels associated with GlassWorm, a persistent software […]
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the access that makes trusted software […]
A previously undocumented Linux implant codenamed Quasar Linux RAT (QLNX) is targeting developers’ systems to establish a silent foothold as well as facilitate a broad […]
Updated with further information from Bitwarden. The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload […]
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen […]
The FBI Atlanta Field Office and Indonesian authorities have dismantled the “W3LL” global phishing platform, seizing infrastructure and arresting the alleged developer in what is […]
Cybersecurity experts are warning about a new iteration of the ongoing GlassWorm campaign. This version uses a novel Zig dropper to discreetly infect all integrated […]
Microsoft has blocked developer accounts used for several popular open-source projects, hindering their ability to release updates and security fixes for Windows, and seemingly without […]
The most actively used part of a company’s IT setup is the computer used by developers. This laptop is where login details are made, tried […]
© Bulletproof Servers. All rights reserved.