GM Tech leadership shakeup continues on software team

General Motors’ software team has lost three top executives in the last month as the automaker takes over a new chief product officer and consolidates its disparate technology businesses into one organization. Baris Cetinok, senior vice president of software and services product management, will be leaving the company, effective December 12, the company confirmed to […]

Shai-Hulud v2 campaign spreads from npm to Maven, exposing thousands of secrets

The second wave of the Shai-Hulud supply chain attack spilled over into the Maven ecosystem after compromising over 830 packages in the npm registry. The Socket Research Team said it has identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that includes the same two components related to Sha1-Hulud: the “setup_bun.js” loader and the main payload “bun_environment.js.” […]

Breaking the boom in the Nordic startup ecosystem

The always fun-filled Slush conference took place in Helsinki last week and, as always, was a show of the growing power of the European ecosystem. Scandinavia in particular is having a moment, this time led by Swedish vibe-coding darlings Loveable. Loveable is seen as an example of a growing ecosystem of successes. Although older names, […]

Bug in jury system used in several US states exposes sensitive personal data

Several public websites designed to help courts in the United States and Canada manage potential jurors’ personal information had simple security flaws that could easily leak sensitive data such as names and home addresses, TechCrunch has learned exclusively. A security researcher, who requested anonymity for this story, contacted TechCrunch for details on the easily exploitable […]

Qilin ransomware turns South Korean MSP breach into “Korean leak” data heist for 28 victims

South Korea’s financial sector has been targeted by what is described as an advanced supply chain attack that led to the deployment of Qilin ransomware. “This operation combines the capabilities of Qilin, a leading Ransomware-as-a-Service (RaaS) group, with the potential involvement of North Korean state-affiliated actors (Moonstone Sleet), which utilized Managed Service Provider (MSP) compromises […]

“Gateway to physics beyond the Standard Model”: The world’s largest neutrino detector turns on – yields surprising results

The first results from the world’s largest neutrino detector have just been published, revealing the most accurate measurements of neutrino parameters to date. After operating the detector at the Jiangmen Underground Neutrino Observatory (JUNO) in southern China for just under two months, researchers were able to measure the parameters of different types, or “flavors,” of […]

Will SOC save you?

Detection is considered a standard investment and first line of defense, so today’s enterprises are expected to have at least six to eight detection tools. However, security leaders have a hard time justifying dedicating resources to their superiors further downstream in the alert lifecycle. As a result, most organizations’ security investments are asymmetric and robust […]