Browsing: Supply Chain Attack

Fast Facts Attackers primarily exploit publicly accessible web applications and perimeter services to establish initial…

Fast Facts Attackers are exploiting the developer ecosystem and cloud services, like GitHub and Microsoft…

Quick Takeaways The GhostAction campaign has compromised over 1,900 GitHub accounts to inject malicious workflows,…

Essential Insights A critical vulnerability in Docker Hub allowed attackers to transfer personal access tokens…

Summary Points Preinstalled malware on low-cost Android devices, particularly MediaTek-based models, allows covert installation of…

Fast Facts Cyber attackers remotely manipulated refrigerator control systems in French supermarkets by exploiting outdated…

Top Highlights Threat actors are using sophisticated social engineering scams, including fake consultancy offers and…

Essential Insights TeamPCP conducted extensive supply-chain attacks by hijacking developer accounts and distributing malware through…

Essential Insights A financially motivated threat actor developed and distributed PhantomRaven, a JavaScript-based information stealer,…

Essential Insights State-sponsored threat actors compromised open-source supply chains through platforms like GitHub and GitLab.…