Microsoft Threat Intelligence has uncovered an active supply chain attack involving malicious npm packages registered under organizational scopes that mirror real internal corporate namespaces, ...
IT researchers have demonstrated a side-channel attack called "FROST" where browsers can spy on user behavior via SSD access times.