#supply-chain-attack tag

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

Ongoing campaign targets Go ecosystem with typosquatted modules deploying malware on Linux and macOS.

fromWIRED

10 months ago

A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

Snowflake targeted in supply chain attack, Kaspersky software banned in the US, AI startup under scrutiny, Amazon's face-recognition tools utilized in UK train stations.

Software development

fromInfoQ

1 week ago

Google Go Module Mirror Served Backdoor for 3+ Years

Research uncovered a major supply chain attack in the Go ecosystem involving a backdoored package.

The attack exploited caching in the Go Module Proxy, emphasizing security vulnerabilities in module management.

DevOps

Separate supply chain attack tied to 23K pwned GitHub repos

The GitHub supply chain attack was likely initiated through a compromised GitHub Action, reviewdog/action-setup, leading to extensive data breaches.

3 months ago

Supply chain attack strikes array of Chrome Extensions

A recent supply chain attack has impacted Chrome extension developers, compromising user data on a large scale.

fromSecuritymagazine

4 months ago

Nearly 400,000 WordPress credentials stolen

A security breach by MUT-1244 has resulted in the theft of over 390,000 WordPress credentials, highlighting the vulnerability of security researchers and pentesters.

Growth hacking

fromThe Hacker News

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

Ongoing campaign targets Go ecosystem with typosquatted modules deploying malware on Linux and macOS.

fromWIRED

10 months ago

A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

Snowflake targeted in supply chain attack, Kaspersky software banned in the US, AI startup under scrutiny, Amazon's face-recognition tools utilized in UK train stations.

Software development

fromInfoQ

1 week ago

Google Go Module Mirror Served Backdoor for 3+ Years

Research uncovered a major supply chain attack in the Go ecosystem involving a backdoored package.

The attack exploited caching in the Go Module Proxy, emphasizing security vulnerabilities in module management.

DevOps

Separate supply chain attack tied to 23K pwned GitHub repos

The GitHub supply chain attack was likely initiated through a compromised GitHub Action, reviewdog/action-setup, leading to extensive data breaches.

3 months ago

Supply chain attack strikes array of Chrome Extensions

A recent supply chain attack has impacted Chrome extension developers, compromising user data on a large scale.

fromSecuritymagazine

4 months ago

Nearly 400,000 WordPress credentials stolen

A security breach by MUT-1244 has resulted in the theft of over 390,000 WordPress credentials, highlighting the vulnerability of security researchers and pentesters.

Compromised GitHub Action Highlights Risks in CI/CD Supply Chains

A popular GitHub Action was compromised, exposing critical security weaknesses in the CI/CD pipeline of open-source Actions.

4 months ago

Information security

OpenWrt supply chain attack scare prompts urgent upgrades

OpenWrt users should upgrade to the same image version to mitigate risks from a reported supply chain attack.

fromBusiness Insider

7 months ago

The detonation of pagers used by Hezbollah shows the depths of supply-chain infiltration

The coordinated attacks in Lebanon indicate a high level of sophistication and planning, likely by a state actor utilizing global supply chains.

fromSecuritymagazine

7 months ago

GitLab releases security updates to fix 17 vulnerabilities

GitLab's recent security update addresses 17 vulnerabilities, including a critical flaw (CVE-2024-6678) with a CVSS score of 9.9 posing severe risks.

fromThe Hacker News

7 months ago

Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

A new supply chain attack technique called Revival Hijack targets the PyPI registry, allowing attackers to exploit existing packages for malicious intent.