GIGAZINE

無料でiPhone・iPad内で動くターミナルアプリ「a-Shell」を使ってみた ...

「a-Shell」は、iPhoneやiPad上でUnix系のターミナル環境を利用できる無料アプリです。スマートフォンやタブレットでどのよう ...
MSN による配信

Gmail servers hijacked by malicious PyPI packages to spread havoc - here's how to stay safe

Socket found seven malicious packages on PyPI The packages were abusing Gmail and WebSocket They were removed from the platform Several malicious PyPI packages were recently observed abusing Gmail to ...

CodeQL 2.25.5がリリース、GitHub Actions対応と精度向上を実現

GitHubは5月28日（現地時間）、コードスキャン機能の中核である静的解析エンジンCodeQLの最新バージョン2.25.5を公開した。今回のアップデートでは、C/C++、Java/Kotlin、GitHub ...

Valid certificates, stolen accounts: how attackers broke npm's last trust signal

Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of seven developer tool ...

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...