Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign (socket.dev) | HN Screenshots

YHacker Newsscreenshots

Screenshot of socket.dev: Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign

First screen, captured 6 months ago.

Looks similar

Screenshot of socket.dev: Trivy under attack again: Widespread GitHub Actions tag compromise secrets

Trivy under attack again: Widespread GitHub Actions tag compromise secrets (socket.dev)

223 points by jicea 7 months ago | 79 comments

Screenshot of socket.dev: Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable

Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable (socket.dev)

4 points by feross 1 year ago | 0 comments

Screenshot of socket.dev: Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised (socket.dev)

29 points by feross 1 year ago | 4 comments

Screenshot of socket.dev: Social engineering campaign targeting tech employees spreads through NPM malware

Social engineering campaign targeting tech employees spreads through NPM malware (socket.dev)

106 points by feross 3 years ago | 71 comments

Screenshot of socket.dev: Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware (socket.dev)

13 points by bhavansig 2 months ago | 1 comments

Screenshot of socket.dev: The push to ban ransom payments is gaining momentum

The push to ban ransom payments is gaining momentum (socket.dev)

99 points by feross 2 years ago | 124 comments

Related stories

Screenshot of promptarmor.com: Claude Cowork exfiltrates files

Claude Cowork exfiltrates files (promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.

prompt-injection claude-cowork anthropic data-exfiltration

Screenshot of community.bitwarden.com: Bitwarden Dual License Model

Bitwarden Dual License Model (community.bitwarden.com)

354 points by Cider9986 16 days ago | 254 comments

Bitwarden community forum announcement that app store builds will become commercially licensed while the GPLv3 open source version continues on GitHub.

bitwarden licensing gplv3 password-manager

Screenshot of law.kuleuven.be: Belgium legalises ethical hacking

Belgium legalises ethical hacking (law.kuleuven.be)

394 points by jruohonen 3 years ago | 57 comments

A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.

ethical-hacking belgium cybersecurity-law vulnerability-disclosure

Screenshot of words.filippo.io: (Post-Quantum) Cryptographic Right Answers

(Post-Quantum) Cryptographic Right Answers (words.filippo.io)

74 points by gavide 14 days ago | 13 comments

Blog post by Filippo Valsorda giving updated 'Cryptographic Right Answers' recommendations for developers, covering post-quantum cryptography choices.

post-quantum-cryptography cryptography cryptographic-right-answers filippo-valsorda

Screenshot of djnn.sh: Anthropic’s paper smells like bullshit

Anthropic’s paper smells like bullshit (djnn.sh)

1070 points by vxvxvx 11 months ago | 300 comments

Blog post criticizing Anthropic's report on disrupting an AI-orchestrated cyber espionage campaign; the captured page shows a Cloudflare block screen.

anthropic ai-cyber-espionage threat-intelligence claude

Screenshot of dreamstation.systems: I'm being cyberattacked by Tesla, Inc

I'm being cyberattacked by Tesla, Inc (dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.

tesla nginx server-logs scanner-traffic