cognitive cybersecurity intelligence
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.
According to JFrog, the packages “rollup-packages-polyfill-core” and “rollup-runtime-polyfill-core” mimic the legitimate “rollup-plugin-polyfill-node” project, down to the description, repository metadata, and
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
Lawmaker Probing Pegasus Spyware Infected Using Same Malware GovInfoSecurity
Push Security Delivers Browser-Native Security as Direct Alternative to SWG and CASB, Targeting the Attacks Proxy-Based Tools Can’t See Business Wire
New macOS malware PamStealer uses PAM to validate stolen data CyberInsider
Iranian Malware Attacks Hit Businesses and Erase Critical Data in Israel WION
