Supply Chain Attack in NPM Steals Credentials
The MUT-1244 threat actor has been identified as the group behind the sophisticated supply-chain attack targeting the @0xengine/xmlrpc package. This group has been active for over a year, using multiple…
CISA adds Cleo Vulnerability CVE-2024-50623 to KEV Catalog
The US CISA adds Cleo vulnerability to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation reported. Security vendor Huntress was the first to publicize the attacks,…