Casey Bisson News Today

Security researchers says the incident was serious because for the two days the AWS credentials were exposed they could have been abused by a hacker.

Days after Google announced an open source bug bounty program, Legit Security reported supply chain attack vulnerabilities in open-source projects from Google and Apache.

The Open Source Vulnerability Rewards Program (OSS VRP) part of program to improve cybersecurity for Google users and open-source consumers worldwide.

Recent LofyLife campaign steals tokens and infects client files to monitor various user actions, such as log-ins, password changes and payment methods.

The campaign uses four malicious packages to spread "Volt Stealer" and "Lofy Stealer" malware in the open source npm software package repository.

Company raises $3.3 million in seed money to offer open-source option to help security teams automate the detection and remediation of security policy violations across multi-cloud environments.

ShiftLeft reports some good security news for a change: a 37% year-over-year reduction in mean-time-to remediate.

Aqua’s Team Nautilus says threat actors can extract the tokens and launch massive attacks on cloud services such as GitHub, AWS and Docker Hub.

The critical vulnerability lets an unauthenticated user execute arbitrary code on a Confluence Server or Data Center instance.

An inside look at how merchant vessels and ports are extraordinarily vulnerable to increasingly sophisticated cyberattacks against unmanaged OT systems