Supply chain attacks feel like they're becoming more and more common.
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency ...
Learn how to install Flatpak apps on an offline Linux system without internet. Works on Debian, Ubuntu, Fedora, and all major ...
Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...
JFrog has uncovered GhostClaw, a fake OpenClaw npm package that stole Keychain passwords, cloud credentials, and crypto ...
In March, JFrog Security Research documented a malware campaign titled GhostClaw/GhostLoader. Since the original ...
Install your apps and config the way Linux users do.
Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...
GhostClaw, a macOS infostealer, is spreading through GitHub repositories and developer tools, and it works because routine ...
The GlassWorm malware made news when it pivoted from exclusively targeting Windows users to also targeting Mac OS users in January, and in the time since, the malware campaign has spread across at ...
A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...