FreshRSS

🔒
❌ Secure Planet Training Courses Updated For 2019 - Click Here
☷
△ 🔃
There are new available articles, click to refresh the page.
Before yesterdayNaked Security

PyPI open-source code repository deals with manic malware maelstrom

By: Paul Ducklin
Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future...

Attention gamers! Motherboard maker MSI admits to breach, issues “rogue firmware” alert

By: Paul Ducklin
Stealing private keys is like getting hold of a medieval monarch's personal signet ring... you get to put an official seal on treasonous material.

S3 Ep129: When spyware arrives from someone you trust

By: Paul Ducklin
Scanning tools, supply-chain malware, Wi-Fi hacking, and why there should be TWO World Backup Days... listen now!

TikTok “Invisible Challenge” porn malware puts us all at risk

By: Paul Ducklin
An injury to one is an injury to all. Especially if the other people are part of your social network.

GitHub blighted by “researcher” who created thousands of malicious projects

By: Paul Ducklin
If you spew projects laced with hidden malware into an open source repository, don't waste your time telling us "no harm done" afterwards.

Poisoned Python and PHP packages purloin passwords for AWS access

By: Paul Ducklin
More supply chain trouble - this time with clear examples so you can learn how to spot this stuff yourself.

GitHub issues final report on supply-chain source code intrusions

By: Paul Ducklin
Learn how to find out which apps you've given access rights to, and how to revoke those rights immediately in an emergency.

JavaScript developer destroys own projects in supply chain “lesson”

By: Paul Ducklin
Two popular open source JavaScript packages recently got "hacked" in a symbolic gesture by the original project creator.

❌