Protecting your development environment: Lessons from Log4j and beyond

Protecting your development environment: Lessons from Log4j and beyond

Open source undeniably fuels innovation and agility in software development today ...
CVE-2024-3094 The targeted backdoor supply chain attack against XZ and libzma

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and libzma

As sure as long weekends arrive in the western world, so too does news of new supply chain attacks. The easter bank holidays were no exception, with the discovery of a targeted ...
CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

As sure as long weekends arrive in the western world, so too does news of new supply chain attacks. The easter bank holidays were no exception, with the discovery of a targeted ...

Octopus Scanner Compromises 26 OSS Projects on GitHub

Updated from original May 29th post. Making a salad for lunch or dinner? What ingredients do you use? Lettuce, carrots, onions, tomatoes, dressing? If you just go by the list of ingredients, ...

Octopus Malware Compromises 26 OSS Projects on GitHub

Updated from original May 29th post. Making a salad for lunch or dinner? What ingredients do you use? Lettuce, carrots, onions, tomatoes, dressing? If you just go by the list of ingredients, ...