SocGholish supply-chain attack targets US sites
Malicious actors are using the compromised infrastructure of an unknown media company to deploy the SocGholish JavaScript malware framework (also known as FakeUpdates) on the websites of hundreds of newspapers…