Experimental News Clipping Site

Tag: public repositories

  • The Register: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/24/not_pretty_not_windowsonly_npm/ Source: The Register Title: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware Feedly Summary: The “is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was infected with cross-platform malware, around the same time that linting utility packages used with the…

  • Slashdot: Google Launches OSS Rebuild

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/07/22/144239/google-launches-oss-rebuild?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Launches OSS Rebuild Feedly Summary: AI Summary and Description: Yes Summary: Google has launched OSS Rebuild, a project aimed at detecting supply chain attacks in open source software by independently verifying package builds from major repositories. The initiative addresses significant security threats in the open-source ecosystem and highlights…

  • Cisco Talos Blog: This is your sign to step away from the keyboard

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/this-is-your-sign-to-step-away-from-the-keyboard/ Source: Cisco Talos Blog Title: This is your sign to step away from the keyboard Feedly Summary: This week, Martin shows how stepping away from the screen can make you a stronger defender, alongside an inside scoop on emerging malware threats. AI Summary and Description: Yes Summary: The provided text offers insights…

  • Microsoft Security Blog: Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/05/21/lumma-stealer-breaking-down-the-delivery-techniques-and-capabilities-of-a-prolific-infostealer/ Source: Microsoft Security Blog Title: Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer Feedly Summary: Over the past year, Microsoft Threat Intelligence observed the persistent growth and operational sophistication of Lumma Stealer, an info-stealing malware used by multiple financially motivated threat actors to target various industries. Microsoft,…

  • Hacker News: GitHub CodeQL Actions Critical Supply Chain Vulnerability (CodeQLEAKED)

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/ Source: Hacker News Title: GitHub CodeQL Actions Critical Supply Chain Vulnerability (CodeQLEAKED) Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a potential supply chain attack on GitHub’s CodeQL due to a publicly exposed GitHub token, emphasizing risks associated with CI/CD vulnerabilities. It highlights how such a breach could…

  • Hacker News: Exposed GitHub repos, now private, can be accessed through Copilot

    —

    by

    Kurt Seifried
    in

    Source URL: https://techcrunch.com/2025/02/26/thousands-of-exposed-github-repos-now-private-can-still-be-accessed-through-copilot/ Source: Hacker News Title: Exposed GitHub repos, now private, can be accessed through Copilot Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the risks associated with data exposure in generative AI systems, particularly focusing on Microsoft Copilot’s ability to access previously public data from GitHub repositories, even after…

  • CSA: How Can Businesses Manage Generative AI Risks?

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloudsecurityalliance.org/blog/2025/02/20/the-explosive-growth-of-generative-ai-security-and-compliance-considerations Source: CSA Title: How Can Businesses Manage Generative AI Risks? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the rapid advancement of generative AI and the associated governance, risk, and compliance challenges that businesses face. It highlights the unique risks of AI-generated images, coding copilots, and chatbots, offering strategies…