Cybersecurity researchers have discovered a malicious npm package named “@acitons/artifact” that typosquats the legitimate “@actions/artifact” package with the intent to target GitHub-owned repositories....
Read MoreAI-enabled supply chain attacks jumped 156% last year. Discover why traditional defenses are failing and what CISOs must do now to protect their organizations. Download the full CISO’s expert guide to AI Supply chain attacks...
Read More
Security misconfiguration jumped to second place while injection vulnerabilities dropped, as...
Read More
GlassWorm, a self-propagating VS Code malware first found in the Open VSX marketplace, continues...
Read MoreThe North Korea-affiliated threat actor known as Konni (aka Earth Imp, Opal Sleet, Osmium, TA406, and Vedalia) has been attributed to a new set of attacks targeting both Android and Windows devices for data theft and remote...
Read More