|
You are here |
socket.dev | ||
| | | | |
www.sysdig.com
|
|
| | | | | On March 14, 2025, StepSecurity uncovered a compromise in the popular GitHub Action tj-actions/changed-files. Tens of thousands of repositories use this | |
| | | | |
www.sonatype.com
|
|
| | | | | Sonatype uncovers a wormable npm software supply chain attack compromising over 180 packages, following S1ngularity and Chalk/Debug campaigns. | |
| | | | |
blog.abhimanyu-saharan.com
|
|
| | | | | A high-severity CVE exposed eslint-config-prettier to a supply chain attack via a phishing compromise. Learn what happened, who's affected, and how to fix it. | |
| | | | |
www.syntaxbearror.io
|
|
| | | Supply Chain Attack on MSPs leave thousands with ransomware, Print Spooler woes continue with Windows, and more on this week's episode of Bear Security. | ||