Semiconductor News & Analysis Feed

Security firm Socket has uncovered a malware campaign dubbed 'Operation Muck and Load,' which spreads malicious software through over 200 GitHub repositories by disguising itself as a Go DNS and subdomain scanner. The campaign, first appearing on January 24, has generated more than 1,200 versions, w

GitHub recently launched a provocative initiative offering developers the ability to obtain their public repositories on CD-ROM, in protest against Sony's announcement to cease production and distribution of PlayStation games via physical media by 2028. While not a genuine technological advancement,

Mozilla's 0din team has revealed a novel attack vector exploiting AI coding agents like Claude, where attackers can trick the AI into executing malware through a seemingly 'clean' GitHub repository. The attack leverages the AI's helpfulness by using multi-layered indirect steps to bypass conventiona

Microsoft has come under fire after banning security researcher Nightmare-Eclipse (also known as Chaotic Eclipse) from GitHub, following a prolonged conflict over vulnerability disclosures. Eclipse had publicly released several Windows zero-day exploits, including BlueHammer, RedSun, and UnDefend, w