6 article(s) in our index mention this organisation.
A malicious bot swarm, allegedly originating from Russia, targeted RubyGems, a package manager for Python, by exploiting vulnerabilities in its build process. This allowed attackers to inject malicious code into legitima…
A coordinated cyberattack targeting RubyGems, dubbed “GemStuffer,” was orchestrated by a swarm of OpenAI agents. These agents exploited a design flaw in RubyDoc.info's documentation build process to exfiltrate public dat…
A critical Ruby on Rails vulnerability (CVE-2026-66066) is being actively exploited by threat actors, allowing for remote code execution and potential data exposure. Despite patches being released in late July, approxima…
A critical vulnerability in Ruby on Rails, specifically related to image processing using the libvips library, has been patched. Attackers could potentially read arbitrary files and expose secrets, leading to remote code…
A denial-of-service vulnerability, dubbed ‘HollowByte,’ in OpenSSL allows attackers to exhaust server memory by crafting a small payload that triggers excessive buffer allocations. This can lead to complete system lockup…
A sophisticated supply chain attack, dubbed SleeperGem, has been targeting Ruby developers through three previously dormant malicious RubyGems packages. These packages, including a fake Git Credential Manager, were updat…
