A cracked malicious version of a Go package lay undetected online for years
Cybersecurity researchers from Socket Security uncovered and publicly spoke about the campaign, which started back in 2021, ...
The Hacker News4h
Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign
Lazarus Group targets job seekers via fake LinkedIn offers, delivering malware that steals crypto wallet data.
Typosquatting in the Go ecosystem: Fake BoltDB package discovered
A malicious package in the Go ecosystem imitates BoltDB and contains a backdoor. Attackers used the caching service to spread the malware unnoticed.
Backdoored package in Go mirror site went unnoticed for >3 years
A mirror proxy Google runs on behalf of developers of the Go programming language pushed a backdoored package for more than ...
The Hacker News1d
Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
Malicious Go package exploits Module Mirror caching to grant remote access, evading detection since November 2021.
Apple moves to open-source, unify Swift component across platforms
Apple has made the build system in its high-level programming language Swift — used by llbuild, the Swift Package Manager and ...
Direct Marketing News6d
Script kiddies targeted by fake malware builder
Discover how script kiddies are being lured by deceptive fake malware builders in the latest cybersecurity trend.
InfoQ6d
Git 2.48: Modernized with Meson Build System, Memory Leaks Fixed
Git 2.48 now supports the Meson build system, a modern alternative to the existing Makefile, Autoconf, and CMake-based ...
Windows Report6d
An IT admin found an ingenious way to silently update dozens of Windows 10 devices to Windows 11 remotely
Do you want to easily update many Windows 10 devices to Windows 11? This Reddit user just forged a special command for it.
New Aquabotv3 botnet malware targets Mitel command injection flaw
A new variant of the Mirai-based botnet malware Aquabot has been observed actively exploiting CVE-2024-41710, a command ...
Visual Studio Magazine8d
AI Toolkit for VS Code Now Lets You 'Bring Your Own Model'
AI Toolkit extension for VS code now supports external local models via Ollama. It has also added support remote hosted ...