Perfctl: Stealthy malware targeting Linux servers(aquasec.com)

134 points by johnfernow 2 years ago | 37 comments

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

Telnyx package compromised on PyPI(aikido.dev)

70 points by overflowy 7 months ago | 25 comments

Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)

77 points by nyku 2 months ago | 26 comments

Wazuh – open-source Security Platform(wazuh.com)

88 points by LorenDB 2 years ago | 43 comments

OAuth for all(blog.cloudflare.com)

348 points by terryds 4 months ago | 147 comments

Cloudflare blog post announcing OAuth support available to all developers to build third-party apps integrating with Cloudflare accounts.