Attackers exploit critical Zimbra vulnerability using cc’d email addresses by Dan Goodin from Ars Technica - All content on 2024-10-02 21:50 (#6R6AP) When successful, attacks install a backdoor. Getting it to work reliably is another matter.
Hundreds of code libraries posted to NPM try to install malware on dev machines by Dan Goodin from Ars Technica - All content on 2024-11-04 23:28 (#6RZQT) These are not the the developer tools you think they are.