In the ever-evolving landscape of cybersecurity, new threats and vulnerabilities emerge daily, demanding our attention. This week, we delve into significant incidents and updates that underscore the importance of vigilance in our digital lives.<\/p>\n
<\/p>\n
Datadog Security Labs has issued a warning regarding multiple campaigns that are systematically enumerating corporate GitHub organizations and user accounts through the GitHub API. Attackers are using automated scraping tools with “ghost” accounts that are often years old, making it difficult to detect their activities. Read more.<\/a><\/p>\n Microsoft has unveiled a new Windows backdoor named GigaWiper, which integrates three older destructive programs into a single package. This backdoor allows operators to choose their method of destruction, including wiping the entire disk or running fake ransomware that scrambles files without saving the key. Read more.<\/a><\/p>\n GitHub has announced the release of npm version 12, which disables install scripts by default to enhance security against supply chain attacks. The new version also deprecates granular access tokens (GATs) that circumvent two-factor authentication, making it a significant update for developers. Read more.<\/a><\/p>\n A new ransomware variant dubbed GodDamn has been discovered, employing the PoisonX kernel driver to disable endpoint defenses. This malware is thought to be a rebranding of the previously known Beast ransomware, raising concerns about its evolving tactics and effectiveness. Read more.<\/a><\/p>\nNew GigaWiper Windows Backdoor Bundles Multiple Destructive Tools<\/strong><\/h3>\n
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk<\/strong><\/h3>\n
GodDamn Ransomware Utilizes PoisonX Driver for Defense Evasion<\/strong><\/h3>\n
Microsoft Patches RoguePlanet Defender Vulnerability<\/strong><\/h3>\n