SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
What's new: A new software supply chain attack, codenamed SleeperGem, has been identified targeting the Ruby ecosystem. Three malicious RubyGems...
Information Security
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
What's new: Hugging Face, the world's largest AI model repository, has reported a breach executed by an autonomous AI agent....
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
What's new: A new Go-based botnet named NadMesh has emerged, targeting exposed AI services to harvest cloud keys and Kubernetes...
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
What's new: Researchers have identified seven malicious npm packages targeting the Vite frontend tooling ecosystem, part of a software supply...
