Java Development Kit (JDK) 26, a planned update to standard Java due March 17, 2026, has reached its second release candidate (RC) stage. The RC is open for critical bug fixes, with the feature set ...

Erez Yalon heads the security research group at Checkmarx. With vast defender and attacker experience and as an independent security researcher, he brings invaluable knowledge and skills to the table.

网络安全研究人员披露了一项名为"沙虫模式"的活跃供应链蠕虫攻击活动，该活动利用至少19个恶意npm包来实施凭据收集和加密货币密钥窃取。 供应链安全公司Socket将此次活动命名为SANDWORM_MODE。与之前的Shai-Hulud攻击波类似，这些恶意代码包具备窃取系统信息、访问令牌、环境机密和API密钥的能力，并能通过滥用被盗的npm和GitHub身份自动传播以扩大影响范围。 Socket公司 ...