Jan 3, 2025 | Podcast
https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html A new cyberattack technique dubbed “DoubleClickjacking” has been discovered, exploiting the timing between double-clicks to bypass existing clickjacking protections. This allows attackers to...
Jan 2, 2025 | Podcast
https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/12/14-million-people-don-t-know-how-to-erase-their-data-from-an-old-device A new survey from the UK’s Information Commissioner’s Office (ICO) reveals that nearly a third of adults in the UK...
Jan 1, 2025 | Podcast
https://www.fortinet.com/blog/threat-research/analyzing-malicious-intent-in-python-code Cybersecurity researchers have discovered malicious packages uploaded to the Python Package Index (PyPI) and the Visual Studio Code Marketplace. These packages, disguised as...
Dec 31, 2024 | Podcast
https://www.cyberhaven.com/blog/cyberhavens-chrome-extension-security-incident-and-what-were-doing-about-it A sophisticated cyberattack has compromised at least 35 Chrome browser extensions, potentially exposing over 2.6 million users to data theft and credential...
Dec 30, 2024 | Podcast
https://arxiv.org/pdf/2412.13459 A new study reveals a significant problem with inauthentic “stars” being used to artificially inflate the popularity of scam and malware distribution repositories on GitHub. These fake stars mislead users into trusting...
Dec 27, 2024 | Podcast
https://www.sonatype.com/blog/counterfeit-eslint-and-node-types-libraries-downloaded-thousands-of-times-abuse-pastebin Cybersecurity researchers have discovered a wave of malicious npm packages and Visual Studio Code (VSCode) extensions targeting developers. These...