Follow for the latest updates and insights on open source security & engineering.
A fake take-home assignment replaced a Homebrew binary on a Binance work laptop. SafeDep rebuilt that setup step as a benign lab and ran it with and without the pmg sandbox. The post gives the...
The October 29, 2026 Binance hack started on developer laptops. A tampered Homebrew install and a fake job interview gave a North Korean group its first access. A short breakdown of the attack path.
A forged commit force-pushed to the antd-img-crop GitHub repository runs a dropper on npm run build that installs a cross-platform stealer and remote-access agent called OverLord. The npm package is...
October was Cybersecurity Awareness Month. It was also the month PHP, Railway, OpenCode, Binance, Polymarket, Cursor, LiteLLM and eight more made the news for a security incident. A short recap of...
Anyone can compute eight eMudhra intermediate CA private keys from public certificates. Browsers block the compromised intermediates, but CI runners, containers, JVMs and Go binaries can still trust...
Get the latest on newly discovered malware, active campaigns, and open source security research, delivered to your inbox.
Start free with open source tools on your machine. Scale to a unified platform for your organization.
