article thumbnail

Developer Sabotages Open-Source Software Package

Schneier on Security

The application, node-ipc, adds remote interprocess communication and neural networking capabilities to other open source code libraries. As a dependency, node-ipc is automatically downloaded and incorporated into other libraries, including ones like Vue.js CLI, which has more than 1 million weekly downloads. […].

Libraries 102
article thumbnail

Microsoft: Raspberry Robin worm already infected hundreds of networks

Security Affairs

The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. Now Microsoft confirmed that the threat was discovered on the networks of multiple customers, including organizations in the technology and manufacturing sectors.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Devices from Dell, HP, and Lenovo used outdated OpenSSL versions

Security Affairs

Researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. Binarly researchers discovered that devices from Dell, HP, and Lenovo are still using outdated versions of the OpenSSL cryptographic library. ” continues the report. that dates back to 2009. .

Libraries 100
article thumbnail

6,009,014 MovieBoxPro Accounts Breached in Another Data Scraping Incident

IT Governance

This week, it turns out at least 191 further Australian organisations, including government entities, were affected by this breach, highlighting the risks of supply chain attacks. Source (New) IT services USA Yes 1,382 Worthen Industries Source 1 ; source 2 (Update) Manufacturing USA Yes 1,277 R.J. Data breached: 395 GB.

article thumbnail

The Week in Cyber Security and Data Privacy: 5 – 11 February 2024

IT Governance

TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB JP Original Corp Source New Manufacturing USA Yes 1.2 TB KSA Architecture Source New Construction and real estate USA Yes 1.5

article thumbnail

GoDaddy discloses a new data breach

Security Affairs

SolarWinds Orion product incident), also increase the risk that we, or our customers using our servers and services, will suffer a security breach.” SolarWinds Orion product incident), also increase the risk that we, or our customers using our servers and services, will suffer a security breach.”

article thumbnail

The Week in Cyber Security and Data Privacy: 1 – 7 January 2024

IT Governance

KG Source 1 ; source 2 (New) Manufacturing Germany Yes 1.1 TB Halara Cannabis Source (New) Manufacturing USA Yes >1,000,000 Proax Technologies Ltd. Source 1 ; source 2 (Update) Manufacturing USA Yes 735 Osteopathic Healing Hands Source (New) Healthcare USA Yes 707 Marathon Coach, Inc.