Days after Google announced an open source bug bounty program, Legit Security reported supply chain attack vulnerabilities in open-source projects from Google and Apache.
Attackers cause Discord discord with malicious npm packages theregister.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from theregister.com Daily Mail and Mail on Sunday newspapers.
Two XSS vulnerabilities found in Google Cloud Platform scmagazine.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from scmagazine.com Daily Mail and Mail on Sunday newspapers.