You are here |
www.reversinglabs.com | ||
| | | |
blog.phylum.io
|
|
| | | | Headed to Black Hat USA? Come talk to Phylum! Software supply chains are complicated. In this complicated web of globally distributed software, attackers can lie in wait, releasing malicious software libraries to unsuspecting developers and organizations. It is prohibitively difficult to manually scan and analyze every package a given organization | |
| | | |
blog.phylum.io
|
|
| | | | There's a renewed surge of attacks with obfuscated JavaScript and fake job campaigns to compromise developers and infiltrate companies. See Phylum research. | |
| | | |
blog.phylum.io
|
|
| | | | At the end of March 2024, a major software supply chain attack was identified: some upstream forks of the popular xz/liblzma library that underpins the massively popular OpenSSH Server was compromised. A rogue contributor appears to have worked to influence the maintainers of the library, adding in seemingly innocuous | |
| | | |
www.reversinglabs.com
|
|
| | RL researchers detected a sophisticated, malicious package believed to be an ongoing campaign that may be linked to a hacktivist gang. |