PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.
Hackers working on behalf of Iran’s Islamic Revolutionary Guard Corps have attacked US industrial sites before. In 2023, a ...
A security researcher frustrated with Microsoft has released the BlueHammer Windows zero-day exploit, telling the company, “I ...
In Telegram groups, men are sharing thousands of nonconsensual images of women and girls, buying spyware, and engaging in ...
A hacker has allegedly stolen a massive trove of sensitive data – including highly classified defense documents and missile ...
Cybercriminals are exploiting the recent Claude Code source code leak to distribute Vidar malware via fake GitHub repositories.
The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...
Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...