A massive security breach occurred in the npm ecosystem as attackers bypassed trust signals to distribute malicious code, while law enforcement successfully compromised a VPN used for criminal anonymity.
Jason··2 min read
Cybercriminal groups are evolving to use physical threats and intimidation against employees to force ransom payments, creating new legal and safety risks that enterprises must address with integrated security frameworks.
Kenji··2 min read
AI is enabling less sophisticated hackers to commit large-scale cybercrimes. Simultaneously, prediction markets face insider trading scrutiny, leading New York to ban state employees from using internal info for betting.
Jessy··2 min read
Attackers compromised the maintainer's token for the popular Axios library to distribute a remote access trojan. Given its integration in 80% of cloud environments, the breach poses a significant supply chain threat.
Kenji··1 min read