⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A Go-based infostealer malware is delivered via ClickFix attacks on macOS. It steals cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials. This poses a significant threat to macOS users' digital assets.
ChainDrop is an npm supply chain worm that self-propagates to steal secrets from GitHub Actions runners. It leverages Ethereum smart contracts to route command-and-control communications.
ChainDrop is an npm supply chain worm that self-propagates to steal secrets from GitHub Actions runners. It leverages Ethereum smart contracts to route command-and-control communications.
Check Point Research discovered five vulnerabilities in workerd, the runtime behind Cloudflare Code Mode and Workers. Two were rated critical, enabling sandbox escape and cross-tenant attacks.
Check Point Research analyzed Cloudflare Code Mode and discovered five memory-corruption vulnerabilities in workerd, the runtime underlying both Code Mode and Workers. These flaws enable sandbox escapes and cross-tenant exposure, affecting millions of developers and over 10% of Cloudflare's traffic.
AWS Certificate Manager now supports the ACME protocol, enabling automation of public certificate issuance and renewal using familiar tools like certbot and cert-manager. This addresses the operational challenge of managing thousands of certificates as validity periods shrink to 100 days by 2027 and 47 days by 2029.