Alert: Millions of GitHub Repositories Likely Vulnerable to RepoJacking Attack
"When a repository owner changes their username, a link is created between the old name and the new name for anyone who downloads dependencies from the old repository," researchers Ilay Goldman and Yakir Kadkoda said.
Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s EnvironmentsAquasec
Threat Alert: Tracking Real-World Apache Log4j AttacksAquasec
Threat Alert: Private npm Packages Disclosed via Timing AttacksAquasec
Malware Forensic Analysis: Capturing What Attackers Leave BehindAquasec
Cloud Workload Security: Aqua Shines in GigaOm's Radar ReportAquasec
Deceptive Deprecation: The Truth About npm Deprecated PackagesAquasec
Integrate Jupyter Notebooks with GitHubThenewstack
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
Pulumi Neo Now Supports AGENTS.mdPulumi
Docker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker
How AI Assistants Can Decode GitHub Repos for UI WritersDocker
How the world’s biggest YouTuber served millions of users on VercelVercel
Build Your Own PluginVercel
GitHub - MintlifyMintlify
How to instantly follow up on Facebook Lead Ads with custom notificationsZapier
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Introducing Dependency Divergence GitHub ActionSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
How to Fully Delete a Git Repository Created with Init? | Better Stack CommunityBetterstack
