Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...