Breaking News – Cyber Threats (last 6h)
Generated: 2026-05-01 03:00 PDT
- Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
The Hacker News • 2026-05-01 02:43 • thehackernews.com
A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Actions tampering, and SSH persistence.
The activity has been attributed to the GitHub account “BufferZoneCorp,” which has published a set of repositories that are associated with malicious Ruby gems and Go modules. As of
https://thehackernews.com/2026/05/poisoned-ruby-gems-and-go-modules.html - US ransomware negotiators get 4 years in prison over BlackCat attacks
BleepingComputer • 2026-05-01 00:47 • www.bleepingcomputer.com
Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. […]
https://www.bleepingcomputer.com/news/security/us-ransomware-negotiators-get-4-years-in-prison-over-blackcat-attacks/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
