North Korean hacking group, Lazarus, is using the malicious Node Package Manager (NPM) package, postcss-optimizer, for a supply chain attack on developers. Once installed, it deploys the BeaverTail malware, which collects credentials and other sensitive data, while executing additional payloads. The malware targets Windows, macOS, and Linux systems. Lazarus continually targets high-value technology and cryptocurrency sectors.
Sixth Sense: GPS and AI Data Exposed for Assistive Devices
Discovery UpGuard has secured an exposed database of AngelSense, a GPS tracker for individuals with special needs. The database included logs containing shipping addresses, contact
