Hundreds of GitHub repos found posing as real software to push malware
THE SO WHAT
Russian actors seeding hundreds of fake GitHub repos to drop infostealers shows the supply chain is now the primary attack surface for developers. Lock down your dev environment this week — enforce signed releases, pin dependencies, and train teams to treat “random helpful repo” as hostile until proven otherwise.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechSpotify Founder Daniel Ek Is Bringing His Body-Scanning Clinics to the U.S.
$700m behind Daniel Ek’s preventive body-scanning clinics signals investor appetite for longitudinal health data plays, not just devices. Health systems and insurers should assume patients will arrive with their own imaging and risk profiles—and decide now whether to integrate, compete, or ignore.
Deep & Emerging TechAnker's compact Solix S2000 home backup battery is 50% off and can run your fridge for 35 hours
Discounted 2kWh home backup like Anker’s Solix S2000 pushes battery storage deeper into the mass market—resilience is becoming a consumer expectation, not a prepper niche. Utilities and device makers should assume more households will have local storage and design tariffs and appliances accordingly.
Deep & Emerging TechNew phishing campaign hits LastPass, Bitwarden users - password manager customers warned not to fall for this scam
Targeting LastPass and Bitwarden users with phishing shows attackers are going after the identity aggregation layer, not just individual accounts. If you rely on password managers organizationally, update your training and incident playbooks to assume manager-themed phishing is a primary threat vector.
Deep & Emerging TechSources: ASML has discussed raising prices for its EUV systems with TSMC and plans to charge 10% more for its DUV systems; TSMC is resisting ASML's plans
If ASML can push through EUV and 10% DUV price hikes over TSMC resistance, the cost basis of advanced nodes moves up again—downstream chip buyers should expect tighter pricing and longer negotiations. Treat leading-edge capacity as a strategic asset and lock in multi-year supply where it matters most.