Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
SecurityWeek

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...
SecurityWeek

Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption

Jesse McGraw (GhostExodus), once a blackhat hacker, shares his journey from high school hacking to redemption as a ...