More details have emerged about the operators behind the first-known phishing campaign[1] specifically aimed at the Python Package Index (PyPI), the official third-party software repository …

How much time do developers spend actually writing code? According to recent studies[1], developers spend more time maintaining, testing and securing existing code than they …

In another finding that could expose developers to increased risk of a supply chain attack, it has emerged that nearly one-third of the packages in …

Researchers have identified functional similarities between a malicious component used in the Raspberry Robin infection chain and a Dridex malware loader, further strengthening the operators’ …

A “major” security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content …

So far 2022 confirms that passwords are not dead yet. Neither will they be anytime soon. Even though Microsoft and Apple are championing passwordless authentication …

The operators of the emerging cross-platform BianLian ransomware have increased their command-and-control (C2) infrastructure this month, a development that alludes to an increase in the …

Researchers have identified 1,859 apps across Android and iOS containing hard-coded Amazon Web Services (AWS) credentials, posing a major security risk. “Over three-quarters (77%) of …

The attack infrastructure used to target Cisco[1] in the May 2022 incident was also employed against an attempted compromise of an unnamed workforce management solutions …

Microsoft on Wednesday disclosed details of a now-patched “high severity vulnerability” in the TikTok app for Android that could let attackers take over accounts when …