Threat actors are using GitHub to spread malicious code through popular repositories like Python Package Index (PyPI), according to researchers at ReversingLabs. Cyber criminals are finding new ways to exploit the software supply chain, using methods that evade detection tools. Most recently, hackers have been using GitHub gists to host two-stage malicious payloads and fetching commands from git commit messages. All the malicious PyPI packages have now been removed.
AusCERT launches new Tabletop Exercise Service for cyber incident readiness – CRN Australia
AusCERT has introduced a Tabletop Exercise Service to help organizations prepare for cyber incidents. The service helps identify gaps in incident response plans and improve
