Beacon, a CRM provider for charities and nonprofits, says an AWS access key "potentially exposed in public JavaScript build artifacts" is the leading suspect in its July breach.
A spoofed CCleaner download site is spreading a multi-stage malware that hijacks Chrome to steal credentials, cookies, and authentication tokens while recording keystrokes and screenshots.
Javascript must be enabled to use this site. Please enable Javascript in your browser and try again. Learn about housing and care considerations to assess options ...
Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...
A slew of attacks against open-source libraries trace back to a financially motivated North Korean nation-state threat actor, finds analysis from Amazon Web Services set for publication Wednesday ...