PyPI Package Hiding Malicious Code, High-Severity Flaws Affect OpenLiteSpeed Web Server Software, WordPress Sites Compromised in Malicious SEO Campaign And More

IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager

A novel timing attack discovered against the npm’s registry API can be exploited to potentially disclose private packages used by organizations, putting developers at risk of supply chain threats