This investigation report contains an applications analysis of 7 different Apple developer accounts (identified so far — maybe there are…
A vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission. The flaw potentially exposes up to 750,000 companies around the world that use Zoom to conduct day-to-day business.
Software developers using GitLab CI are being targeted with malware through a typosquatting attack, putting downstream users at risk.
Despite open source software’s essential role in all software built today, it’s far too easy for bad actors to circulate malicious packages that attack the systems and users running that software. Unlike mobile app stores that can scan for and reject malicious contributions, package repositories have limited resources to review the thousands of daily updates and must maintain an open model where anyone can freely contribute. As a result, malicious packages like ua-parser-js, and node-ipc are regularly uploaded to popular repositories despite their best efforts, with sometimes devastating consequences for users.
How handcrafted SVGs in applications can compromise applications and lead to full remote code execution in MIT’s Scratch.
