A GitHub Action supply chain breach targeting Coinbase escalated into a widespread campaign compromising the "tj-actions/changed-files" tool and leaking CI/CD secrets. This incident exemplifies today's evolving cyber threats, including multi-function malware like StilachiRAT, the "Vapor" A...
North Korean Lazarus hackers have deployed six malicious npm packages, downloaded approximately 330 times, designed to steal credentials and cryptocurrency data. Using typosquatting techniques to mimic legitimate libraries, these packages systematically collect system information, extract ...
Chinese APT group Winnti conducts RevivalStone cyber espionage campaign targeting Japanese manufacturing, materials, and energy sectors. The attack exploits SQL vulnerabilities and deploys various malware components including DEATHLOTUS, PRIVATELOG, and CUNNINGPIGEON. Using compromised MSP...
North Korean Lazarus Group launches "Marstech Mayhem" campaign using new JavaScript malware Marstech1, targeting developers through GitHub. The operation has affected 233 victims globally, focusing on cryptocurrency wallets and browser extensions. The sophisticated attack features advanced...
Emerging ransomware group Sarcoma has attacked Unimicron, a major Taiwanese PCB manufacturer, claiming to have stolen 377 GB of sensitive data. While the company acknowledges the attack primarily affected their Shenzhen subsidiary, they haven't confirmed the data breach. The incident showc...
