Detected by @cyberxyz_io | faker 6.6.6 was gutted by its own maintainer in 2022. npm still serves it as latest, ~1.9M downloads a week. The advisory took 76 days to appear.
We keep a PR open that bumps an app to it. The build fails every time.
https://t.co/5O43j6o9IW
For folks interested about Cybersecurity topics in Vancouver, come and join us for a discussion about Closed vs Open source security hosted by @EricChennells
https://t.co/poR3vHfYFu
#vancouver#AppSec#Cybersecurity
Looking forward to hosting a panel discussion next Thursday at @dctrlvan on Open vs Closed Source in the context of Cybersecurity, AI, and Bitcoin.
Streamed live and in person in Vancouver.
https://t.co/fSoeeBPsug
Our Package Centrality method flagged the axios npm supply chain attack early, customers were alerted before it hit the news.
4 days in, we're still helping teams trace exposure and lock things down.
Want this coverage? https://t.co/gGdd8Hm13e
#npm#axios#SupplyChainSecurity
@dhh So you’re trying to tell me it Evil? but dude, why you didn’t check ChatGPT its doing the same or even worse (sometimes sharing false historical information)
The Israeli military just killed a 5-year-old girl in Gaza.
The Israeli military waged 4 wars on Gaza since 2009. Because of Israel’s total blockade of Gaza for 15 years, Palestinians in Gaza don’t have enough water, electricity, medicines.
Stop the bombing, end the siege.
Hey #DFIR folks, here we go for another round! I will randomly choose by the end of next Sat. 6/11 one person to attend @cyber5w#CCDFA certification course LIVE with me starting June 13th. #C5W
All I ask you is to Retweet/RT, not even a like or follow!!!
https://t.co/TjJGE7jBXa
#Microsoft discovers a set of two new root privilege escalation vulnerabilities affecting #Linux systems — tracked as CVE-2022-29799 & CVE-2022-29800; and collectively called "Nimbuspwn," that can be exploited to perform malicious actions.
Read: https://t.co/XrQcZJwC9p
#infosec
The Journalist that was beaten wasn’t #Hamas
The women who’ve been assaulted weren’t Hamas
The child that was arrested wasn’t Hamas
That's a hell of a way to spin it ya thugs. Settlers feeling persecuted somehow while Palestinians bury their dead ones #Israel#AlAqsaMosque
Need to be careful on Toyota supplier hack. Every company and politician is going to start blaming all cyber-attacks on ‘the Russians’. When in fact it could be poor security over years exploited by a ransomware affiliate in country X who’s been inside the network for months.
أتلقى الكثير من الأسئلة عن لقاح أسترازينكا الذي يلحق به اللغط من جديد، بعد انضمام ألمانيا وكندا الى رأي فرنسا بايقاف استخدامه عند الفئات تحت ال٥٥-٦٠ عاماً.
سأستعرض في هذا الثريد قصة اللقاح مع موضوع التجلطات منذ البداية لنحاول أن نوضّح الأمر بطريقة علمية. ثريد (طويل)⤵️
عندما يتحدث الافراد عن ارائهم في العلن، فهم عادة ما يغيّرون هذه الاراء لتتناسب مع المقبول اجتماعيا او سياسيا
تسمى هذه الظاهرة 'تزوير التفضيلات' او preference falsification