supply-chain attackAttack on DevOps: secrets leaked via malicious GitHub Action
How to respond to a compromised GitHub changed-files Action incident.
supply-chain attack
7 articles
Remove Polyfill.io from your website
The JavaScript CDN service Polyfill.io has started spreading malicious code. Remove the service’s script from your website.
LinuxMalicious code discovered in Linux distributions
A backdoor implanted into XZ Utils has found its way into popular Linux distributions.
Case study: fake hardware cryptowallet
Full review of a fake cryptowallet incident. It looks and feels like a Trezor wallet, but puts all your crypto-investments into the hands of criminals.
PHP language source code compromise attempt
Unknown attackers tried to add a backdoor to PHP scripting language source code.
#TheSAS2018Do not become a link in a supply chain attack
Even if you are really not an interesting target for an APT actor, you can still be used in a malware delivery chain