Tag: Typosquatting
Rescoms rides waves of AceCryptor spam
Last year ESET published a blogpost about AceCryptor – one of the most popular and prevalent cryptors-as-a-service (CaaS) operating since 2016. For H1 2023...
Breaking News
Brands Beware: X’s New Badge System Is a Ripe Cyber-Target
Fraudsters are taking advantage of the new verification system implemented by X, formerly known as Twitter, in order to impersonate brands and steal personal...
‘Looney Tunables’ Linux Flaw Sees Snowballing Proof-of-Concept Exploits
Proof-of-concept (PoC) exploits for the security flaw CVE-2023-4911, dubbed Looney Tunables, have already been developed, following last week's disclosure of the critical buffer overflow...
PowerShell Gallery Prone to Typosquatting, Other Supply Chain Attacks
Microsoft's PowerShell Gallery presents a software supply chain risk because of its relatively weak protections against attackers who want to upload malicious packages to...
You may not care where you download software from, but malware does
One of the pieces of advice that security practitioners have been giving out for the past couple of decades, if not longer, is that...
RomCom Spies Target NATO Summit Ahead of Zelensky’s Arrival
The RomCom threat group is back once again with a new campaign targeting attendees of a NATO Summit in Lithuania, where Ukrainian President Volodymyr...
Flaky AI models can be made even worse through poisoning
French outfit Mithril Security has managed to poison a large language model (LLM) and make it available to developers – to prove a point...
S3 Ep141: What was Steve Jobs’s first job?
by Paul Ducklin PONG FOR ONE!?
No audio player below? Listen directly on Soundcloud.
With Doug Aamoth and Paul Ducklin. Intro and...
NPM Plagued with ‘Manifest Confusion’ Malware-Hiding Weakness
A weakness in Node Package Manager (npm) could allow anybody to hide malicious dependencies and scripts within their packages, a former GitHub employee claims.Npm...
Job Seekers, Look Out for Job Scams
The economic downturn is already a devastating blow to job seekers everywhere. Now scammers are taking advantage of the situation by ramping up their...
Cycode Launches CI/CD Pipeline Monitoring Solution (Cimon) to Prevent Supply Chain Attacks
SAN FRANCISCO, June 12, 2023 – Cycode, the leading application security platform, today announced the launch of Cimon, a seamless solution that enhances the security of CI/CD...
Easily Exploitable Microsoft Visual Studio Bug Opens Developers to Takeover
Security researchers are warning about a bug in Microsoft Visual Studio installer that gives cyberattackers a way to create and distribute malicious extensions to...
ChatGPT Hallucinations Open Developers to Supply Chain Malware Attacks
Attackers can exploit ChatGPT's penchant for returning false information to spread malicious code packages, researchers have found. This poses a significant risk for the software supply...
Latest Intelligence
