Vulnerabilities
Dependency Confusion Attacks: Risks and Protection for Small Businesses
Attackers exploit the priority rules of package managers to inject malicious code into internal systems without needing external access or credentials.
supply chain security
Everything Sandbox Gazette has reported about supply chain security: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Detect Trojanized Software: Signals, Tools, and Hidden Blind Spots
Legitimate binaries often hide malicious payloads in memory or side channels, bypassing static file hashing and traditional signature-based scanning entirely.