Developer

Developer | News, how-tos, features, reviews, and videos

Developer workstations are the new beachhead

Attackers are realizing that instead of hacking a hardened server, they can just trick one developer into installing a malicious plugin to steal all the keys to the kingdom.

By Josh Taylor

May 12, 20267 mins

CyberattacksDeveloperHacking

Developer workstations are the new beachhead

New ‘StoatWaffle’ malware auto‑executes attacks on developers

Developers urged to immediately upgrade React, Next.js

Developers left large cache of credentials exposed on code generation websites

Malicious npm package sneaks into GitHub Actions builds

OpenAI launches Aardvark to detect and patch hidden bugs in code

Resources

Managing modern identity complexity and reducing executive risk

The new era of executive risk: Why identity security must be continuous

5 identity security questions CISOs must be ready to answer