… Security firm StepSecurity found that both versions were published via the compromised npm account of "jasonsaayman," the project's primary maintainer, who was reportedly locked out of the account while the packages were being pushed. …
Cyber-crime Russian cybercrims phish their way into officials' Signal and WhatsApp accounts Dutch spies flag large-scale campaign to hijack secure messaging accounts Russian-linked hackers are trying to break into the Signal and WhatsApp accounts of government officials, journalists, and military p… …
… The three hyperscalers account for around 70 percent of the cloud services market in the region. …
… In a public update following the incident, Guillermo Rauch reckons the intrusion began with a compromised employee account linked to Context.ai. An attacker used that access to hijack the employee's Vercel Google Workspace account to drill into the company's systems. …
… One of the NCSC's earlier advisories, dated April 2023, noted that similar attacks on Cisco routers resulted in APT28 deploying Jaguar Tooth malware , establishing backdoors for follow-on attacks. ® security russia ncsc dns cybersecurity cyber-crime
… It's also a favorite target for security researchers because a making printers do bad things is fun, and b as the default printing system for Apple device operating systems and most Linux distributions, any CUPS security flaw has a wide blast radius. …
… On March 31, Axios, one of npm's most widely used HTTP client libraries, became a malware delivery vehicle for about three hours after attackers hijacked a maintainer's account and slipped a remote-access trojan RAT into two seemingly legitimate releases. …