PHP, one of the most widely used web programming languages, is rarely viewed as a direct attack surface at its core level. Security focus typically shifts toward frameworks and third-party libraries. However, new research shows that PHP’s built-in functionality specifically the ext/standard extension can expose critical risks when handling untrusted input such as image files. […]

The post Crafted JPEGs Could Trigger PHP Memory Bugs for Exploitation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new supply chain attack campaign targeting developers has surfaced in the npm ecosystem, with four malicious packages discovered stealing sensitive data, including SSH keys, cloud credentials, and cryptocurrency wallets. The campaign, identified by OX Security within the past 24 hours, highlights the growing risk posed by typosquatting attacks and reused open-source malware. The malicious […]

The post Malicious npm Packages Steal SSH Keys, Cloud Credentials, and Crypto Wallets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.