Threat actors are using GitHub to spread malicious code through popular repositories like Python Package Index (PyPI), according to researchers at ReversingLabs. Cyber criminals are finding new ways to exploit the software supply chain, using methods that evade detection tools. Most recently, hackers have been using GitHub gists to host two-stage malicious payloads and fetching commands from git commit messages. All the malicious PyPI packages have now been removed.
Concerns over the security of electronic personal health information intensifies
Ascension Health warned that the personal data of its patients and staff were compromised during a ransomware attack in May that impacted around 5.6 million
