OpenMandriva Linux Project Bites Back After Attempted Sabotage A disturbing incident has unfolded within the OpenMandriva Linux community, with a contributor accused of attempting to sabotage the project. The alleged attempt involved deleting crucial repositories and pushing an empty package that could have caused harm to users’ systems. What’s more concerning is that this act … Read more
Iran’s cyber operations have long been a source of concern, with many assuming that only critical infrastructure is at risk. However, recent attacks demonstrate that this assumption is misguided. The groups behind these incidents, including Handala and Ababil of Minab, are not simply targeting high-profile targets; they are instead on the hunt for easily exploited … Read more
A malicious package on the Node Package Manager (npm) has compromised thousands of developer systems, targeting cryptocurrency wallets and stealing private keys and mnemonic seed phrases. The Injective Labs SDK project’s GitHub repository was hacked, allowing attackers to publish a malicious version of the @injectivelabs/sdk-ts npm package. This supply-chain attack highlights the importance of securing … Read more
OpenMandriva Linux Project Hit by Attempted Internal Sabotage A long-running dispute among contributors to the OpenMandriva Linux project has escalated into an attempted act of internal sabotage. The perpetrator, Davide Beatrici, a leading developer of the instant messaging app Mumble and a friend of the attacker, deliberately deleted crucial repositories and pushed an empty package … Read more
A devastating new backdoor has been discovered lurking in Windows systems, capable of unleashing a triple threat of malware on unsuspecting users. Dubbed GigaWiper, this cunning piece of code combines the destructive power of disk wiping, the deceitful tactics of fake ransomware, and the stealthy capabilities of spyware to wreak havoc on compromised machines. GigaWiper’s … Read more
As attackers continue to refine their tactics, a new trend is emerging that highlights the importance of cybersecurity vigilance. Dormant GitHub accounts are being exploited to blend in with legitimate users and gain insight into corporate organizational structures – all without raising suspicion. This stealthy approach has left many organizations scrambling to re-evaluate their security … Read more
A critical security vulnerability has been discovered in a popular Node Package Manager (npm) package, allowing hackers to steal cryptocurrency wallet private keys and mnemonic seed phrases. The Injective SDK project’s GitHub repository was compromised, leading to the publication of a malicious package on npm that has already been downloaded over 50,000 times. The affected … Read more
Cloud Bucket Hijacking, Windows LPE Chain, and Global Fraud Bust Exposed in Recent Threat Landscape Updates A series of alarming security threats has been exposed in recent days, with hackers targeting cloud storage buckets, exploiting a previously unknown vulnerability in Windows systems, and engaging in large-scale global fraud. In this article, we’ll take a closer … Read more
A major update to the popular package manager npm has just been rolled out, with significant implications for developers and users of open-source software. As of July 9th, npm version 12 will no longer execute install scripts by default, a change aimed at reducing the risk of supply chain attacks. This move comes in response … Read more
A New Windows Backdoor Emerges, Wiping Data and Spying on Users In a worrying development, researchers have uncovered a sophisticated backdoor malware targeting Windows systems, capable of wiping entire disks, spreading fake ransomware, and installing spyware. The new threat, discovered by experts at cybersecurity firm ESET, has been dubbed “GigaWiper.” If you use a Windows … Read more