GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has ...
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.
Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other ...
The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected ...
A threat actor started using the Shai-Hulud worm in attacks only days after the malware’s source code was released.
The TeamPCP hacking group has released the Shai-Hulud worm’s source code and is challenging miscreants to use it in attacks.
The exploit code was almost too neat. When Google’s Threat Intelligence Group flagged a previously unknown software ...
Google's GTIG identified the first zero-day exploit developed with AI and stopped a mass exploitation event. The report documents state actors using AI for vulnerability research and autonomous ...
Google says attackers are using AI for zero-day research, malware development, reconnaissance, and access to premium AI tools ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Google caught the first zero-day exploit built with AI assistance. Criminal and state backed hackers are using AI models to ...