Lemmy - security · Scour

10,000 GitHub repositories distributing Trojan malware found

Stop using JWTs as a session mechanism

A backdoor in a LinkedIn job offer

new wave of malware in the aur

21 Zero-Days in FFmpeg

Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware

🔥 New in Vulnerability-Lookup: KEV Catalog Coverage!

Russian satellites linked to mysterious GPS disruptions across several countries

Vulnerability-Lookup 5.1.0

Lies We Tell Ourselves About Email Addresses

A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload

Microsoft's open source tools were hacked to steal passwords of AI developers

Magecart skimmer turns Stripe into a malware command server

New IronWorm malware hits 36 packages in npm supply-chain attack

Ammaraskar: 1-Click GitHub Token Stealing via a VSCode Bug

"Patches are available to sophisticated attackers as soon as Google discloses them to OEMs. A partial embargo for months makes no sense."

1-Click GitHub Token Stealing via a VSCode Bug

The Newest Instagram "Exploit" is the Goofiest I've Seen

No fix yet for critical RCE bug in open-source Git service Gogs

Vulnerability-Lookup 5.0.0 released

Log in to enable infinite scrolling