Very concerned by the surge in supply-chain attacks—incidents have nearly doubled recently, yet companies remain silent on how they’re tackling this. Even worse, most users have no idea these attacks are happening. Transparency and awareness are urgently needed to address this growing threat.

:quotesL:Malicious Backdoors Found in Python and npm Packages Targeting Windows and Linux:quotesR: via Oppapick

https://oppapick.com/backdoors-python-npm-windows-linux/

#Tech #TechNews #Linux #Windows #Python #npmpackages #InfoSec

Example of curb cut effect: I created a vocabulary (spelling, pronunciation, & definition) for network engineering terms at my employer, so that CART captioners could prepare.

I now send this to people on other teams or new network engineers as well, because we use a ton of acronyms in neteng.

It's a cheat sheet for all the jargon we use, helpful to a lot more than captioners!

Again, accessibility helps everyone, not just the intended user.

Your team should have a CART glossary. 1/2

John Hultquist, Chief Analyst of Google Threat Intelligence Group, is warning that threat actors consistent with Scattered Spider are now targeting the insurance industry.

Scattered Spider activity tends to blanket an entire industry with as many compromises as possible before moving on.

Also, insurance company compromises tend to be waterfall events; the actors often pivot to customers due to all the risk-related data taken.

#threatintel #cybersecurity #infosec

https://www.linkedin.com/posts/john-hultquist-76226478_actors-that-bear-the-hallmarks-of-scattered-activity-7340442348008472577-tOiH?utm_source=share&utm_medium=member_desktop&rcm=ACoAABIZhqYBjXCQuV7JX7N_3xlpxZY6alHZ77o