Search: “RubyGems”

18 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 29 Vulnerability 18 AI safety & security 16 Exploit / PoC 6 Data breach 5 Ransomware 4 Threat actor 4 Industry 3 AI tools & infra 3 Research 3 Phishing & fraud 3

SeverityAll critical 17 high 49 medium 18 low 2 info 8

RubyGems 2.7.6 addresses several flaws and implements some improvements

Security AffairsFeb 20, 18:08 UTC · Feb 20, 2018Vulnerability

30

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

The Hacker NewsAug 9, 06:49 UTC · Aug 9, 2025Vulnerability

42

Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages

The Hacker NewsJan 6, 11:09 UTC · Jan 6, 2025Vulnerability

55

Week in review: Cloud migration and cybersecurity, data trending on the dark web, Zoom security

Help Net SecurityApr 19, 00:00 UTC · Apr 19, 2020Vulnerability in the wildCVE-2020-3952

60

What public money does to open-source projects

Help Net SecurityJul 16, 00:00 UTC · Jul 16, 2026Vulnerability

55

GitHub dismissed security reports on flaws now exploited by supply

The RecordJun 17, 08:52 UTC · Jun 17, 2026Vulnerability

42

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories

The Hacker NewsJun 12, 05:36 UTC · Jun 12, 2026Vulnerability1

42

Hackers target AI and crypto as software supply chain risks grow

Help Net SecurityDec 3, 14:29 UTC · Dec 3, 2025Vulnerability in the wild

60

Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys

The Hacker NewsSep 21, 03:53 UTC · Sep 21, 2023Vulnerability

42

Open source vulnerabilities add to security debt

Help Net SecurityDec 19, 00:00 UTC · Dec 19, 2022Vulnerability

42

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

The Hacker NewsSep 24, 04:54 UTC · Sep 24, 2022Vulnerability

42

Google Launches New Open Source Bug Bounty to Tackle Supply Chain Attacks

The Hacker NewsSep 1, 03:01 UTC · Sep 1, 2022Vulnerability

55

Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects

The Hacker NewsOct 7, 11:50 UTC · Oct 7, 2021Vulnerability CVE-2021-38305

47

Dependency Confusion: Another Supply-Chain Vulnerability

Schneier on SecurityMar 15, 13:39 UTC · Mar 15, 2021Vulnerability

42

Dependency Confusion Supply-Chain Attack Hit Over 35 High

The Hacker NewsFeb 10, 12:57 UTC · Feb 10, 2021Vulnerability

42

Open Source Does Not Equal Secure

Schneier on SecurityDec 3, 17:21 UTC · Dec 3, 2020Vulnerability

30

Survey of Supply Chain Attacks

Schneier on SecurityJul 28, 06:40 UTC · Jul 28, 2020Vulnerability

55

Backdoor vulnerability in open source tool exposes thousands of apps to remote code execution

CyberScoopApr 4, 20:51 UTC · Apr 4, 2019Vulnerability in the wild

60