GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

The post Supply Chain Sabotage: Bitwarden CLI Compromised in Global “Checkmarx” Campaign appeared first on Daily CyberSecurity. Related posts: The Mutable Tag Trap: Critical 9.4 CVSS Attack on Xygeni GitHub Action Exposes CI/CD Pipelines Malicious Packagist Themes Target Vietnamese OphimCMS Sites with Trojanized JS Backdoored React Native Packages Target Developers with Crypto-Stealing Malware

Bitwarden now supports passkey logins on Windows 11 for Microsoft Entra ID users, extending passwordless sign-ins to device authentication. The post Bitwarden Brings Passkey Logins to Windows 11, Expanding Passwordless Sign-Ins appeared first on TechRepublic.