The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. Miasma appears to be an evolution ...
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.
Researchers say prompt injection attacks could manipulate AI coding agents to access sensitive credentials stored in software ...
Dashlane said that attackers mounted a coordinated hacking campaign against a large base of its users in an attempt to ...
Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...
Miasma compromised 32 Red Hat packages June 1 via a hijacked CI/CD pipeline producing valid SLSA attestations, then hit 57 more June 3 using Phantom Gyp to evade install monitors. Red Hat confirmed no ...