Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified packages, is below - ...

It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's a supply chain attack ...

Data & MLOps Engineer building scalable ML systems. Passionate about cloud, data platforms, and responsible AI. I have deployed Kafka pipelines that ran cleanly in staging for two weeks. No lag. No ...

I'd like to thank my co-author, Martin Zugec, for his valuable contributions to this report. This intrusion adds three dimensions to the public understanding of Chinese APT activity in contested ...

The post GitHub Actions Supply Chain Attack: Trivy Breach & Workflow appeared first on Grip Security Blog. Since the end of February, the popular Trivy security scanner has been under attack. In ...

I’ve been torrenting legally for over fifteen years — Linux ISOs, Creative Commons music, public domain films, open-source software builds. And during that time, I’ve watched the threat landscape ...

If you work with AI APIs and local LLMs, there's a good chance you've at least heard of LiteLLM. It's one of the most popular Python libraries for interacting with large language models, offering a ...

The last major Windows 11 23H2 feature update was released in Fall 2023. Contrary to previous fears, Windows 10 users are not completely excluded from further development. Microsoft is also planning ...

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...