The CPUID website, popular in the PC hardware community, was recently hacked and altered to deliver malicious versions of CPU-Z, HWMonitor, and PerfMonitor. CPU-Z, HWMonitor, and PerfMonitor provide essential PC hardware insights: CPU-Z delivers detailed system information on the processor,… Read More "CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads"
OpenAI revealed on Friday that it’s one of many organizations affected by the recent Axios supply chain attack, which cybersecurity experts have attributed to North Korean hackers. Axios is a widely used open source JavaScript HTTP client library for making… Read More "OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack"
The North Korean threat actor blamed for the Axios supply chain attack has been aiming its social engineering campaign at various Node.js maintainers, Socket reports. The Axios attack occurred on March 31, when two malicious package versions were published to… Read More "North Korean Hackers Target High-Profile Node.js Maintainers"
A threat actor has targeted the Strapi ecosystem in a fresh supply chain attack involving 36 malicious NPM packages, according to supply chain security firm SafeDep. An open source headless CMS built on Node.js, Strapi allows developers to create websites… Read More "Guardarian Users Targeted With Malicious Strapi NPM Packages"
The European Commission (EC) has confirmed that hackers stole over 300GB of data from its AWS environment using an API key compromised in the Trivy supply chain attack. The incident occurred on March 24 and was initially disclosed on March… Read More "European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack"
