Supply Chain Compromises Impact Nx Console and GitHub Repositories
CISA Current Activity·
Originalartikel lesen bei CISA Current ActivityCISA is prioritizing the response to multiple emerging software supply chain intrusion campaigns targeting developer ecosystems Continuous Integration/Continuous Development (CI/CD) pipelines. These recent incidents, including the GitHub compromise via a malicious Nx Console Visual Studio Code (VS...
MITRE ATT&CK Kill Chain (9 Techniken)
Reconnaissance
Resource Development
Initial Access
Command & Control