CyberWire Daily
Follow
NPM? Not my problem.
A new Shai-Hulud campaign has compromised popular npm packages, highlighting supply chain vulnerabilities. Easterly argues that small municipalities require more support in cybersecurity defenses, particularly concerning critical infrastructure. Chinese threat groups are rapidly exploiting new vulnerabilities, showcasing accelerated attack capabilities. Samsung has banned certain smart TV applications that utilize residential proxies to share user internet connections. Hackers successfully breached a banking database in Liechtenstein, impacting numerous legal entities. The Swiss government's IT agency experienced a suspected SharePoint attack, leading to account compromises. Microsoft's bug bounty program recorded its highest payouts to date, exceeding twenty million dollars. Researchers revealed a privilege boundary flaw in AI-driven CI/CD workflows, posing a significant security risk. Air Force veteran Roberta Anderson is promoting her book, "Breaking the Firewall," which shares her insights. Bug hunting is increasingly shifting towards a more complex process of bug sorting.