Tag: developer security

Metabase Releases Security Updates After Zero Day Vulnerability Grants Unauthorized Administrator Access

Risk & Resilience
Metabase has released security updates after confirming active exploitation of a zero day vulnerability that allows attackers to gain administrator access without authentication.

Black Hat 2026 Research Reveals CSS Techniques That Can Target Webmail Passwords And Authentication Tokens

Risk & Resilience
Research presented at Black Hat USA 2026 demonstrates CSS based attack techniques affecting major webmail services, highlighting risks involving passwords, authentication tokens, and AI connected email workflows.

Trivy Supply Chain Attack Spurs Self Propagating CanisterWorm Across Npm Ecosystem

Risk & Resilience
A supply chain attack linked to Trivy has led to the spread of CanisterWorm malware across dozens of npm packages, exploiting tokens and decentralized infrastructure.

GlassWorm Supply Chain Campaign Targets Developers Through Malicious Open VSX Extensions

Risk & Resilience
Security researchers report an expanded GlassWorm campaign using malicious Open VSX extensions and hidden Unicode code to target developers and steal sensitive data.

Recent articles

spot_img