Homebrew 7.0.0 arrives with the BrewUI graphical interface, enhanced sandboxing, and a new command to scan installed packages for vulnerabilities.
A maximum-severity GitLab vulnerability is being actively exploited by threat actors to access sensitive configuration files and secrets, risking software supply chain compromises.
A browser extension used by over 30,000 users is transmitting Twitch OAuth tokens to a third-party proxy service, potentially allowing account compromise.
Red Heron has weaponised a critical Gitea remote code execution vulnerability to compromise organisations across six countries, including the U.S. and Taiwan.
The verified HBO Max Reddit account was hijacked to run over 100 malicious advertisements using the ClickFix technique to infect devices with infostealing malware.
