Novo Nordisk Breach Exposes Software Development Pipeline Risk
(darkreading.com)
1.
3.
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
(bleepingcomputer.com)
4.
With Complex Cloud Integrations, Small Errors Lead to Major Compromises
(darkreading.com)
5.
Velonus – Open-source AppSec scanner that deduplicates SAST noise
(news.ycombinator.com)
6.
Offenders sentenced up to 10 years for spying on TSMC
(news.ycombinator.com)
7.
Official SAP npm packages compromised to steal credentials
(bleepingcomputer.com)
8.
Show HN: Kloak, A secret manager that keeps K8s workload away from secrets
(news.ycombinator.com)
9.
10.
Tabloid reports linking 10 missing and dead scientists spur FBI probe
(arstechnica.com)
11.
Some secret management belongs in your HTTP proxy
(news.ycombinator.com)
12.
13.
14.
15.
How the Trivy supply chain attack harvested credentials from secrets managers
(news.ycombinator.com)
16.
Hackers steal and leak sensitive LAPD police documents
(techcrunch.com)
17.
18.
DHS Contracts Explorer – Hacked data from the Office of Industry Partnership
(news.ycombinator.com)
19.
20.
OpenAI defeats xAI’s trade secrets lawsuit
(theverge.com)
21.
Silicon Valley engineers were indicted for allegedly sending secrets to Iran
(news.ycombinator.com)
22.
23.
25.
Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack
(bleepingcomputer.com)
26.
Infisical (YC W23) Is Hiring Engineers to Build the Modern OSS Security Stack
(news.ycombinator.com)
27.
Intel says star hire from TSMC didn’t steal secrets
(theverge.com)
28.
Stop Putting Your Passwords into Random Websites (Yes, Seriously, You Are the PR
(news.ycombinator.com)
29.
Securing the Win: What Cybersecurity Can Learn From the Paddock
(darkreading.com)
30.
Self Propagating NPM Malware Compromises over 40 Packages
(news.ycombinator.com)
Today's top topics:
android authority
polymarket
chatgpt
apple
anthropic
fake bets
sony
ai chatbots
iphone
ifixit