CrowdStrike has launched Real-Time Supply Chain Attack Protection, a capability natively embedded in the CrowdStrike Falcon sensor that detects and blocks malicious open-source packages at the endpoin…
North Korea's STARDUST CHOLLIMA hacking group social-engineered a maintainer of the Mastra AI framework with a fake LinkedIn job pitch, then used stolen credentials to poison 131 npm packages, accordi…
OpenAI has banned accounts linked to North Korean threat actors who used its AI models to research cyber intrusion tools, phishing, malware, and cryptocurrency theft, as disclosed in a case study orig…
Amazon Threat Intelligence has linked multiple compromises of popular NPM packages including axios, debug, chalk, and typo-crypto to a single DPRK-linked threat actor tracked as SAPPHIRE SLEET, STARDU…