A deceptive proof-of-concept (PoC) exploit for “LDAPNightmare” on GitHub lures users into downloading infostealer malware. The malicious repository project tricks users into infecting their systems with a malware that steals computer data and sends it to an external FTP server. The ploy isn’t new, but continues to trick unsuspecting users, indicating the need for caution and authenticity checks when sourcing public exploits.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
