EUVD-2002-1717

Malware in sbrugna...

EUVD-2024-45922

Malicious code in bioql PyPI...

Developer account body snatchers pose risks to the software supply chain

Over the past several years, high-profile software supply chain attacks have increased in frequency. These attacks can be difficult to detect and source code repositories became a key focus of this research. Developer account takeovers present a substantial risk to the software supply chain becau...

Suspicious HTML Mail Phishing Attempt

Several mail phishing campaigns use malicious HTML files to lure victim users to send the attacker the username and password to their e-mail account...

Own the Email, Own the Person

For attackers looking to take control of a victim’s online presence, there is no better place to start than the target’s email account. If you own the email, you own the person. That’s never been more true than today, with so many social networks, services and shopping sites attached to users’...