Tag: information stealing
Hackers Target Popular arrayref Rust Crate in Supply-Chain Attack
Jeff Burt | | arrayref, information stealing, North Korea, Rust programming language, software supply chain attacks, StepSecurity, typosquatting, Wiz ResearchSecurity researchers are sorting through a complex, stealthy, and fast-moving supply-chain attack aimed at pushing information-stealing malware by compromising the account of the maintainer of multiple Rust crates and introducing four more ...
LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK
Jeff Burt | | AI infrastructure, AI supply chain attacks, AI-driven CI/CD pipelines, Aqua Security Trivy, CloudSEK, code repositories, FBI, information stealing, LiteLLM, malware, Mini Shai-Hulud, PyPi, TeamPCPThe massive supply-chain attack that compromised LiteLLM in the spring affected more than 2,500 companies and exposed about 434,000 CI/CD pipelines, with victims ranging from top-tier IT and AI companies to cybersecurity ...
N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor
Jeff Burt | | backdoors, Contagious Interview, Git repositories, github, information stealing, Jamf, North Korea, remote code executionJamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information ...
Attackers Testing New Strain of Shai-Hulud on npm: Aikido
Jeff Burt | | Aikido Security, GitHub repositories, information stealing, JavaScript, leaked secrets, npm registry, Shai-Hulud wormThreat actors behind the virulent Shai-Hulud worm that wreaked havoc in open npm repositories toward the end of 2025 apparently are trying out a new strain that comes with slight modifications. Security ...
