Threat actors are using GitHub to spread malicious code through popular repositories like Python Package Index (PyPI), according to researchers at ReversingLabs. Cyber criminals are finding new ways to exploit the software supply chain, using methods that evade detection tools. Most recently, hackers have been using GitHub gists to host two-stage malicious payloads and fetching commands from git commit messages. All the malicious PyPI packages have now been removed.
Australian AI healthcare firm StrongRoom AI has partnered with CyberQ Group to launch StrongShield, a cybersecurity solution designed to defend pharmacies and healthcare providers against