GitHub Repositories Impersonate Legit Software to Push Malware
Nearly 300 fake GitHub repositories impersonate legitimate software to distribute infostealer malware, collecting data from web browsers, cryptocurrency wallets, and messaging apps.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
Nearly 300 fake GitHub repositories impersonate legitimate software to distribute infostealer malware, collecting data from web browsers, cryptocurrency wallets, and messaging apps.
The Trump administration has unveiled a new federal clearinghouse, 'Gold Eagle', to share AI cyber threat information between the government and private sector, aiming to patch vulnerabilities before they are exploited by bad actors.
Microsoft released software updates to fix at least 570 security holes in its Windows operating systems and other software, including 60 critical bugs and three zero-day flaws.
The gap between vulnerability disclosure and exploitation is closing, with new flaws emerging at a rate of one every 7.4 minutes, and AI turning advisories into working exploits in under a day.
Varonis Threat Labs created Breach at the Beach, a unique Entra ID training experience, to help cybersecurity professionals enhance their skills through hands-on learning.
The Pentagon suspends CMMC phase 2 requirements pending a 60-day review, citing bureaucratic obstacles and a shortage of approved third-party assessors.
The UK and EU have imposed joint cyber sanctions on Russia, blaming the FSB for a cyberattack on Poland's energy grid that threatened to cut heating to half a million people.
States are building their own election defense networks as federal support evaporates, with the Trump administration's firing of Election Assistance Commission commissioners and a Department of Justice warning threatening states with criminal prosecution.
The European Union and the UK have jointly sanctioned dozens of Russian individuals and entities over cyberattacks across Europe, targeting government networks and critical infrastructure.