Ax Sharma

Thousands of GitHub repositories were forked (copied) with their clones altered to include malware, a softwar…

The Fedora Project has announced that it will no longer permit Creative Commons 'No Rights Reserved' aka CC0-…

Google Search and Drive are erroneously flagging links to Association for Computing Machinery (ACM) research …

A security advisory for a vulnerability (CVE) published by MITRE has accidentally been exposing links to remo…

Django, an open source Python-based web framework has patched a high severity vulnerability in its latest rel…

PyPI packages 'keep,' 'pyanxdns,' 'api-res-py' were found to be containing a backdoor due to the presence of …

Yesterday, developers took notice of two hugely popular Python and PHP libraries, respectively, 'ctx' and 'PH…

PyPI module 'ctx' that gets downloaded over 20,000 times a week has been compromised in a software supply cha…

Scammers are now leveraging dating apps like Tinder and Grindr to pose themselves as former victims of physic…

Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. But, this gr…

In a surprising move, the popular open source project, SheetJS aka "xlsx," has dropped support for the npm re…

A bug in Google Docs is causing it to crash when a series of words are typed into a document opened with the …

One of Ferrari's subdomains was hijacked yesterday to host a scam promoting fake Ferrari NFT collection, acco…

Heroku has now revealed that the stolen GitHub integration OAuth tokens from last month further led to the co…

Mitsubishi Electric, one of the world's leading manufacturers of large-scale electrical and HVAC systems has …

Sonatype has caught newer typosquats of the popular 'colors' npm library that contain obfuscated malware. The…

A YouTube influencer with hundreds of thousands of subscribers is encouraging followers to conduct cyber warf…

The Open Source Security Foundation (OpenSSF), a Linux Foundation-backed initiative has released its first pr…

Austin Peay State University (APSU) confirmed yesterday that it had been a victim of a ransomware attack. The…

A 'logical flaw' in the npm registry enabled authors of malicious packages to quietly add anyone and any numb…

PIA's attorneys argues that these allegations must be stricken from the case because they are completely irre…

Image credit: Mitya Ivanov/Unsplash Two-dimensional (2D) barcodes, more prominently recognized as QR codes, a…

This week in malware we have a lot to go over. A mysterious 'Distutil' Python library found on the PyPI repos…

Apache has fixed a critical vulnerability in its vastly popular Struts project that was previously believed t…