Cyber Attacks
Rust 1.100 Adds Cargo Dependency Cooldowns to Block Fresh Malware Packages
Rust 1.100 introduces an opt-in feature that lets developers reject newly published package versions, buying time to spot malicious code before it spreads.
supply chain
Everything DataSafe Radar has reported about supply chain: 2 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Cyber Attacks
GitHub CI/CD Workflows: GhostAction Exfiltrates Secrets from 346 Repos via Stolen Maintainer Credentials
Threat actors used stolen maintainer credentials to inject malicious workflows that exfiltrate CI/CD secrets and hardcoded keys from source code history.