Slack's private GitHub code repositories stolen over holidays
HomeNewsSecuritySlack's private GitHub code repositories stolen over holidays Slack suffered a security incident over the holidays affecting some of its private GitHub code repositories. The immensely popular Salesforce-owned IM app is used by an estimated 18 million users at workplaces and digital communities around the world. Customer data is not affected BleepingComputer has come across a secur
Google search crashes when you ask "How many emojis on Apple"
HomeNewsTechnologyGoogle search crashes when you ask "How many emojis on Apple" Google Search is timing out when users search for specific terms like "How many emojis on iOS," "How many emojis on Apple" and "How many emojis on Windows." BleepingComputer was able to reproduce the issue on both Google search sites and the mobile app. We observed server errors when looking up these terms, without any
FBI: Stolen PII and deepfakes used to apply for remote tech jobs
HomeNewsSecurityFBI: Stolen PII and deepfakes used to apply for remote tech jobs The Federal Bureau of Investigation (FBI) warns of increasing complaints that cybercriminals are using Americans' stolen Personally Identifiable Information (PII) and deepfakes to apply for remote work positions. Deepfakes (digital content like images, video, or audio) are sometimes generated using artificial intellig
Pro-Ukraine hackers use Docker images to DDoS Russian sites
Docker images with a download count of over 150,000 have been used to run distributed denial-of-service (DDoS) attacks against a dozen Russian and Belarusian websites managed by government, military, and news organizations. Behind the incidents are believed to be pro-Ukrainian actors such as hacktivists, likely backed by the country's IT Army. DDoS cyberattacks aim to cripple operations of by send
GitHub suspends accounts of Russian devs at sanctioned companies
Russian software developers are reporting that their GitHub accounts are being suspended without warning if they work for or previously worked for companies under US sanctions. According to Russian media outlets, the ban wave began on April 13 and didn't discriminate between companies and individuals. For example, the GitHub accounts of Sberbank Technology, Sberbank AI Lab, and the Alfa Bank Labor
Popular 'coa' NPM library hijacked to steal user passwords
Popular npm library 'coa' was hijacked today with malicious code injected into it, ephemerally impacting React pipelines around the world. The 'coa' library, short for Command-Option-Argument, receives about 9 million weekly downloads on npm, and is used by almost 5 million open source repositories on GitHub. Hours after this discovery, another commonly used npm component 'rc' was also found to ha
Empty npm package '-' has over 700,000 downloads — here's why
A mysterious, one-letter npm package named "-" sitting on the registry since 2020 has received over 700,000 downloads. What's more? The package contains no functional code, so what makes it score so many downloads? Inside the npm package "-" An npm package called "-" has scored almost 720,000 downloads since its publication on the npm registry, since early 2020. There's only one version of the pac
Fake WordPress Plugin Comes with Cryptocurrency Mining Function
HomeNewsSecurityFake WordPress Plugin Comes with Cryptocurrency Mining Function Malicious plugins for WordPress websites are being used not just to maintain access on the compromised server but also to mine for cryptocurrency. Researchers at website security company Sucuri noticed the number of malicious plugins increase over the past months. The components are clones of legitimate software, alter
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
DuckDuckGo browser allows Microsoft trackers due to search agreement
Hackers target Tatsu WordPress plugin in millions of attacks
PHP Becomes First Programming Language to Add Modern Cryptography Library in Its Core