AI & ML

An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Google’s threat intelligence group said it had a mole inside TeamPCP's inner circle.

Authorities arrest 2 alleged members of prolific hacking group TeamPCP

The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.

Terabytes of credentials leaked in massive supply-chain attack

The data was scraped and exfiltrated from 2,500 users of a compromised AI package.

TeamPCP: как команда хакеров-любителей «Дюны» закинула в наши Node.js-пакеты червей Shai-Hulud

npm install — такая привычная многим из читателей команда, но за последние пару месяцев она обернулась сущим кошмаром для инженеров по безопасности.…

A hacker group is poisoning open source code at an unprecedented scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.