Jovyn Lobo retweeted
A massive supply chain attack just hit the JavaScript ecosystem.
18 core NPM packages were hacked, including chalk, strip ansi and debug.
These libraries have over 2 billion weekly downloads.
Here’s what happened, how it affects crypto and how to stay safe 🧵
(1/8)
Jovyn Lobo retweeted
Major software supply chain attack in progress against multiple npm packages with millions of weekly downloads. Including ansi-regex, supports-color, has-ansi, simple-swizzle, color-name, is-arrayish, slice-ansi
Code injection example:
npmdiff.dev/simple-swizzle/0…
Scan your npm packages now for traces of malicious package: github.com/safedep/vet
Jovyn Lobo retweeted
$5 Membership sale is live for the next 24 hours: account.shodan.io/billing/me…
Jovyn Lobo retweeted
GitLab disclosed a bug submitted by asterion04: hackerone.com/reports/229334… - Bounty: $35,000 #hackerone #bugbounty
Jovyn Lobo retweeted
1/ Meet Sushil Chouhan, An Indian national who owns a scam call center in New Delhi, India. He has been scamming thousands of innocent people since November 2023.
Jovyn Lobo retweeted
Strava will be performing planned maintenance and will not be available from 7 p.m. PST - 8 p.m. PST on January 25th, 2023. To manually upload an activity, check out this article: tinyurl.com/7wjyfh9n
Jovyn Lobo retweeted
When I was in school this used to be at the beginning of every textbook.
It didn’t register then but must have had an impact on me.
Now I keep reading it over and over again. It’s now more than ever to read and mull over. Especially today.
Jovyn Lobo retweeted
There's a saying in Fintech:
You either die a consumer goods company, or live long enough to see yourself enter financial services.
One company has managed to do both.
Let me tell you why Starbucks is one of the most successful banks in the U.S.:
Jovyn Lobo retweeted
A guy in the UK cut holes in his fence so his huskies could look out and then added masks so they look good doing it!! 😂
(Andy Grannell)
Jovyn Lobo retweeted
A bit late to the press, but it’s good news.
I _am_ going to the BlackHat USA.
Not just going.
My colleague @_hacktheripper and I are delivering a 4day Cloud Security training.
#infosec Defenders, this one’s for you!!
@BlackHatEvents @notsosecure
blackhat.com/us-22/training/…
Jovyn Lobo retweeted
We are showcasing our Attack Surface Management offering NVADR at @BlackHatEvents USA (Las Vegas).
If you are looking for a strong #ASM vendor, meet us at our Booth in Innovation City (#IC76) to check out our solution and its capabilities.
#bhusa #attacksurface #asm #infosec
Jovyn Lobo retweeted
"Mario games teach us that even if something is essentially the same, psychologically it can be completely different. This example is very easy to understand."
