Researcher hijacks popular Packagist PHP packages to get a job


A researcher hijacked over a dozen Packagist packages—with some having been installed hundreds of millions of times over the course of their lifetime. The researcher reached out to BleepingComputer stating that by hijacking these packages he hopes to get a job. And, he seems pretty confident that this would work. [...]


https://www.bleepingcomputer.com/news/se...get-a-job/

Police dismantles Try2Check credit card verifier used by dark web markets


The U.S. Department of Justice announced today the indictment of Russian citizen Denis Gennadievich Kulkov, suspected of running a stolen credit card checking operation that generated tens of millions in revenue. [...]


https://www.bleepingcomputer.com/news/se...b-markets/

Windows admins can now sign up for ‘known issue’ email alerts


Microsoft announced today that Windows admins can now choose to be emailed when new known issues are added to the Windows release health section of the Microsoft 365 admin center. [...]


https://www.bleepingcomputer.com/news/mi...il-alerts/

Facebook disrupts new NodeStealer information-stealing malware


Facebook discovered a new information-stealing malware distributed on Meta called 'NodeStealer,' allowing threat actors to steal browser cookies to hijack accounts on the platform, as well as Gmail and Outlook accounts. [...]


https://www.bleepingcomputer.com/news/se...g-malware/

Drone goggles maker claims firmware sabotaged to ‘brick’ devices


Orqa, a maker of First Person View (FPV) drone racing goggles, claims that a contractor introduced code into its devices' firmware that acted as a time bomb designed to brick them. [...]


https://www.bleepingcomputer.com/news/te...k-devices/

Russian hackers use WinRAR to wipe Ukraine state agency’s data


The Russian 'Sandworm' hacking group has been linked to an attack on Ukrainian state networks where WinRar was used to destroy data on government devices. [...]


https://www.bleepingcomputer.com/news/se...ncys-data/

Hackers start using double DLL sideloading to evade detection


An APT hacking group known as "Dragon Breath," "Golden Eye Dog," or "APT-Q-27" is demonstrating a new trend of using several complex variations of the classic DLL sideloading technique to evade detection. [...]


https://www.bleepingcomputer.com/news/se...detection/

City of Dallas hit by Royal ransomware attack impacting IT services

The City of Dallas, Texas, has suffered a Royal ransomware attack, causing it to shut down some of its IT systems to prevent the attack's spread. [...]


https://www.bleepingcomputer.com/news/se...-services/

RSA 2023: Top Trends - Beyond AI, Tools, and Products




https://www.hackerone.com/events/rsa-202...d-products

Carvana Q1 earnings preview: Retailer expects smaller adjusted loss than year ago

<p>The company expects its used-vehicle volume to land between 76,000 and 79,000 vehicles in the three months ending March 31, down about a quarter from a year earlier, according to a preliminary estimate it provided in a March 22 regulatory filing.</p>

https://www.autonews.com/earnings-report...usted-loss