Third-party code

According to Mandiant, threat group UNC4841 dropped a second wave of backdoor malware on some victims, including government organizations, to maintain persistence for espionage purposes.

Ashley Benge, director of threat intelligence advocacy at ReversingLabs, told SC Media that unlike other popular games, the average developer making Roblox levels is likely to be younger, unattached to a larger corporate or business entity and less sophisticated about threats from open source software.

Here’s a business case for why CISOs should consider third-party support.

Sonatype reported the malicious PyPI packages on July 28 and the registry admins took them down.

The latest data shows in several cases an uptick in the number of zero-day bugs observed being exploited in the wild. Some observers tell SC Media that may actually be a good sign.