Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, where it pilfers sensitive credentials in hopes of stealing yet more confidential data, researchers said.

The supply-chain attack began Monday and remained active at the time this post went live, according to researchers at security firm Aikido. It’s the result of the threat actor responsible for the hack taking control of @redhat-cloud-services, a legitimate channel in the npm repository that’s reserved for official Red Hat packages. As such, the channel is widely trusted by developers who rely on Red Hat cloud services.

The vicious cycle of today’s supply-chain attacks

It’s unclear precisely how the threat actor took control of the namespace, but it almost certainly involved the compromise of credentials required to access it, possibly through a previous supply-chain attack. More than 30 packages seem to be affected.

Read full article

Comments

In a small randomized trial in the United Kingdom, adults who added a serving of 100% fruit juice or a smoothie to a healthier diet reported lower depression scores after four weeks.

The post Daily Glass of Fruit Juice May Lift Your Mood: Study appeared first on Sci.News: Breaking Science News.

Os investigadores da Fox-IT identificaram um novo malware do grupo Lazarus que opera quase exclusivamente na memória dos equipamentos infetados, recorrendo a técnicas avançadas de evasão para dificultar a deteção e análise.

The post Hackers do grupo Lazarus criam malware “invisível” que se esconde na memória do PC appeared first on Tek Notícias.

Para Nelson Pereira, o sector das telecomunicações entrou numa nova era. Neste artigo fala da evolução e da necessidade de resiliência, lembrando que as telecomunicações continuam a ser o sistema nervoso da economia digital.

The post Telecomunicações em 2026: da promessa tecnológica à execução que faz a diferença appeared first on Tek Notícias.