Tag

malicious code

5 articles

Latest in malicious code

DevsecOps software supply chain data, pipelines, data lineage

Blogs

Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable

A critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, according to researchers w…

Apr 21, 20263 min

All malicious code Articles

Showing 1–5 of 5

Feb05

Blogs

Typosquat Supply Chain Attack Targets Go Developers

A backdoor that impersonates a widely used database module in the popular Go programming language can give hackers control of infected systems, according to a senior threat intelli…

3 min

Jul25

Blogs

More Than 3,000 ‘Ghost’ Accounts Spreading Malware on GitHub

GitHub and similar open-source code and project repositories have become a common target of cybercriminals looking to lure developers into unknowingly downloading malicious scripts…

3 min

Jun28

Cloud Management

Polyfill Becomes a Supply-Chain Risk to 100,000 Websites

A Chinese company in February bought the domain and GitHub account for Polyfill, a popular open-source library used by more than 100,000 websites to deliver JavaScript code.

3 min

May09

DevOps and Open Technologies

Checkmarx Report Highlights Need for AppSec Collaboration

A research report published by Checkmarx finds the same basic malicious software developed using multiple programming languages as cyberattackers industrialize their malware develo…

3 min