Tag: infostealer

GitHub Supply Chain Attack Campaign Expands Through Stolen Developer Credentials

Risk & Resilience
The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.

Next.js Patch Addresses Critical Remote Code Execution And Service Disruption Risks

Risk & Resilience
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.

North Korea Linked npm Packages Impersonate Rollup Polyfill Tools To Target Developer Systems And Steal Secrets

Risk & Resilience
Security researchers have uncovered malicious npm packages linked to North Korea that impersonate Rollup polyfill tools to deliver remote access malware and steal developer credentials and sensitive data.

Recent articles

spot_img