#open-source security Articles | LavX News | LavX News

npm Introduces 2FA-Gated Publishing and Package Controls to Combat Supply Chain Attacks

npm Introduces 2FA-Gated Publishing and Package Controls to Combat Supply Chain Attacks

Project Glasswing: An Initial Update

Vulnerabilities

Project Glasswing: An Initial Update

CISA Announces No‑Cost Cybersecurity Services for Siemens ROS‑2 Deployments

20,000 Linux Users Compromised: Malicious Cemu Build Steals Credentials

Vulnerabilities

20,000 Linux Users Compromised: Malicious Cemu Build Steals Credentials

Debian Enforces Reproducibility, Adds loong64 Architecture in Release Cycle Update

Canonical and Ubuntu Servers Disrupted by Sustained Cyber Attack, Services Offline for Over 24 Hours

Canonical and Ubuntu Servers Disrupted by Sustained Cyber Attack, Services Offline for Over 24 Hours

Ongoing Supply Chain Attacks Worm into SAP npm Packages

Vulnerabilities

Ongoing Supply Chain Attacks Worm into SAP npm Packages

Vulnerabilities

Security Researcher Discovers Critical Vulnerabilities in Forgejo, Proposes 'Carrot Disclosure' Approach

npm Supply Chain Worm Compromises Developer Environments, Steals Secrets and Spreads Like Wildfire

Vulnerabilities

npm Supply Chain Worm Compromises Developer Environments, Steals Secrets and Spreads Like Wildfire

The New Economics of Cybersecurity: When Security Becomes a Token Arms Race

The New Economics of Cybersecurity: When Security Becomes a Token Arms Race

Vulnerabilities

Brocards for Vulnerability Triage: A Practical Framework for Security Analysis

Trivy Supply Chain Attack Exposes Critical Security Gaps in Open Source Tooling

Vulnerabilities

Trivy Supply Chain Attack Exposes Critical Security Gaps in Open Source Tooling

axios Supply Chain Compromise Exposes Vulnerabilities in Open Source Ecosystem

Vulnerabilities

axios Supply Chain Compromise Exposes Vulnerabilities in Open Source Ecosystem