A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Also: SourceAudio and Symphonic, EVEN and Universal Music Group, broke records and Innovo Management, and more.