Who’s Tracking You? Use This New Service to Find Out. It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you…
krebsonsecurity.com described a supply chain compromise involving compromised software components. The affected package was distributed through standard channels, meaning any project using the component received the malicious code as part of their build process. Organizations need to audit dependencies and verify package integrity.
Source: krebsonsecurity.com