Security update live blog - New Win 11 security tools, npm packages compromised

JavaScript developer destroys own projects in supply chain “lesson” – Sophos News

Cybersecurity News & Articles

Manifest Confusion: Don't Believe What You See; How Attackers Can Trick Developers, by Yehuda Gelb, checkmarx-security

Unseen Threats in Software Development The Perils of Trojanized NPM Packages - SentinelOne

The Official SmarterTools Blog

Improve Your Security With systemd-journal and Netdata

FIN7 Using Windows 11 Alpha-Themed Docs to Drop Javascript Backdoor

NPM Account Takeover Results in Crypto Supply Chain Attack, by Yehuda Gelb, checkmarx-security, Dec, 2023

Alert: peacenotwar module sabotages npm developers in the node-ipc package to protest the invasion of Ukraine

Live Updates: SolarWinds Supply Chain Attack, Solarwinds Hack, Orion Software Breach, Cyware

Crosschain Security Considerations for the Degen in All of Us · Devcon Archive: Ethereum Developer Conference

Invisible npm malware - evading security checks with crafted versions