.NET Devs Targeted With Malicious NuGet Packages

In a possible first for the NuGet repository, more than a dozen components in the .NET code repository run a malicious script upon installation, with no warning or alert.

https://www.darkreading.com/application-...t-packages

Cyberpion Rebrands As IONIX

IONIX illuminates exploitable risks across the real attack surface and its digital supply chain providing security teams with critical focus to accelerate risk reduction.

https://www.darkreading.com/attacks-brea...s-as-ionix

Ferrari discloses data breach after receiving ransom demand


Ferrari has disclosed a data breach following a ransom demand received after attackers gained access to some of the company's IT systems. [...]


https://www.bleepingcomputer.com/news/se...om-demand/

Clop ransomware claims Saks Fifth Avenue, retailer says mock data stolen


The Clop ransomware gang claims to have attacked Saks Fifth Avenue on its dark web leak site. Saks admits the incident is linked to the ongoing GoAnywhere MFT software exploits but states that no real customer data was stolen. [...]


https://www.bleepingcomputer.com/news/se...ta-stolen/

Coinbase Wallet 'Red Pill' flaw allowed attacks to evade detection


Coinbase wallet and other decentralized crypto apps (dapps) were found to be vulnerable to "red pill attacks," a method that can be used to hide malicious smart contract behavior from security features. [...]


https://www.bleepingcomputer.com/news/se...detection/

Breached hacking forum shuts down, fears it's not 'safe' from FBI


The notorious Breached hacking forum has shut down after the remaining administrator, Baphomet, disclosed that they believe law enforcement has access to the site's servers. [...]


https://www.bleepingcomputer.com/news/se...-from-fbi/

LockBit ransomware gang now also claims City of Oakland breach


Another ransomware operation, the LockBit gang, now threatens to leak what it describes as files stolen from the City of Oakland's systems. [...]


https://www.bleepingcomputer.com/news/se...nd-breach/

Microsoft: Windows preview updates to target last week of the month


Microsoft today announced that optional non-security preview release updates would be released during the fourth week of the month starting in April 2023. [...]


https://www.bleepingcomputer.com/news/mi...the-month/

Mozilla Firefox 111.0.1 fixes Windows 11 and macOS crashes


Mozilla has addressed issues causing Firefox to crash on macOS and to freeze with a non-responding blank window when starting on Windows 11 systems. [...]


https://www.bleepingcomputer.com/news/so...s-crashes/

Hackers use new PowerMagic and CommonMagic malware to steal data


Security researchers have discovered attacks from an advanced threat actor that used "a previously unseen malicious framework" called CommonMagic and a new backdoor called PowerMagic. [...]


https://www.bleepingcomputer.com/news/se...teal-data/