Researchers revealed that easyjson, a crucial Go package for JSON serialization, is controlled by Moscow-based developers from VK Group, raising significant security concerns. This foreign control poses risks to U.S. infrastructure, given VK’s ties to Russian state security. Experts warn of exploitation scenarios, urging organizations to consider alternative libraries or community-led replacements for enhanced security.

Patch healthcare security gaps to keep cybercriminals out
Dr. Eric Liederman, CEO of CyberSolutionsMD, notes that as financial institutions bolster their security, cybercriminals are increasingly targeting healthcare organizations, perceiving them as more vulnerable