Threat actors are using GitHub to spread malicious code through popular repositories like Python Package Index (PyPI), according to researchers at ReversingLabs. Cyber criminals are finding new ways to exploit the software supply chain, using methods that evade detection tools. Most recently, hackers have been using GitHub gists to host two-stage malicious payloads and fetching commands from git commit messages. All the malicious PyPI packages have now been removed.
New Mac Malware Threatens User Data, Experts Warn
Banshee Stealer, a new malware threatening Mac computers, can steal users’ sensitive information undetected for over two months, according to cybersecurity company Checkpoint. Once downloaded