A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects. The group, tracked as DeceptiveDevelopment, used the stolen access to change code in public and private repositories between April and September 2026. Every poisoned project then became a new... Weiterlesen: North Korean Hackers Steal Developer Credentials to Inject Malware In…
Intelligence View
⚡ tsecurity.de Intelligence
North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in trusted software projects.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
27 Kaynaklar
CVE-2024-13362 | XT Quick View for WooCommerce Plugin on WordPress Parameter url cross site scripting
26 diğer kaynaklar
VVulDB Updatesvor 8 Std.CVE-2024-13362 | Notification Bar, Announcement and Cookie Notice Plugin Parameter cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Smart phone field for Gravity Forms Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Bulk Auto Image Alt Text optimizer Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 8 Std.CVE-2024-13362 | Recent Post Slider and Banner Slider Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 7 Std.CVE-2024-13362 | TopNewsWp Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 7 Std.CVE-2024-13362 | Premmerce Permalink Manager for WooCommerce Plugin Parameter cross site scripting
+20
25 Kaynaklar
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
24 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updatesvor 5 Std.CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updatesvor 4 Std.CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updatesvor 4 Std.CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updatesvor 4 Std.CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updatesvor 4 Std.CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+18
9 Kaynaklar
Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up
8 diğer kaynaklar
GGoogle Alertvor 2 Std.Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloitvor 4 Std.claude-code-backdoor-check CCyber Security Newsvor 4 Std.Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor IIT Security Newsvor 4 Std.Anthropic’s Claude Bypasses AI Safety Checks, Triggering Blackmail and Code Sabotage in Tests CCyber Securityvor 17 Std.🔓 Cybersecurity: Claude Code: Millionenfach installierte Cursor-Erweiterung kompromittiert MMicrosoft Security Blogvor 8 Std.Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4309582/malware-trojanlar-viruesler/north-korean-hackers-steal-developer-credentials-to-inject-malware-into-github-and-software-packages/