W4SP Stealer uses Malicious PyPI Packages
Attackers are using W4SP stealer, for creating fake Python packages and use rudimentary obfuscation techniques in an attempt to infect developers. W4SP, a trojan that is designed to steal crypto…
Microsoft Digital Defence Report 2022
Microsoft comes with a warning on nation-state actors increasingly leveraging publicly-disclosed zero-day vulnerabilities for breaching target environments. Microsoft in its Digital defence report noted that it only takes 14 days…
Tanium adds SBOM Based Vulnerability Detection
Tanium updated with a capability for detecting libraries and software packages with known vulnerabilities within a software bill of materials (SBOM) manifest that can then be used to automate remediation…