Risk Assessments/Management

The Hacker News reports that a high-severity vulnerability in Google's OAuth client library for Java has been fixed last month.

Interactive chatbots are being used in phishing attacks in an effort to increase victim confidence, while reducing their attention, according to SecurityWeek.

Cybersecurity firm Nisos discovered that the Fronton botnet, which was first discovered by a hacktivist group to have been created on behalf of Russia's intelligence service, had more extensive capabilities beyond enabling distributed denial-of-service attacks, ZDNet reports.

BleepingComputer reports that malware activity from the stealthy Linux trojan XorDDoS has spiked by 254% over the past six months.

GitLab Continuous Integration pipelines are being targeted in a new software supply chain attack dubbed CrateDepression, which involves malware deployment, reports SecurityWeek.

Following its recent attack against Costa Rica, the Conti ransomware group has reportedly ceased operations, according to BleepingComputer.

Google has introduced the new Assured Open Source Software service, which offers access to Google developers' secure packages for enterprise open-source software users in an effort to strengthen software supply chain security, reports ZDNet.