supply-chain attack

The JavaScript CDN service Polyfill.io has started spreading malicious code. Remove the service’s script from your website.

A backdoor implanted into XZ Utils has found its way into popular Linux distributions.

Full review of a fake cryptowallet incident. It looks and feels like a Trezor wallet, but puts all your crypto-investments into the hands of criminals.

Unknown attackers tried to add a backdoor to PHP scripting language source code.

Even if you are really not an interesting target for an APT actor, you can still be used in a malware delivery chain