SecBoard
Zurück zur Übersicht
ManagerEnergieIT/SaaSKI-Sicherheit

'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows

Dark Reading·
Originalartikel lesen bei Dark Reading

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

MITRE ATT&CK Kill Chain (2 Techniken)

Reconnaissance
T1592.002

Software

Execution
T1059.006

Python

Vollständigen Artikel lesen bei Dark Reading

Verwandte Artikel

Tata Electronics confirms cyberattack as hackers leak data

BleepingComputer·vor etwa 2 Stunden

Dragos Unveils AI for OT Security 

SecurityWeek·vor etwa 5 Stunden

Canadian Electricity Provider London Hydro Discloses Data Breach

SecurityWeek·vor etwa 13 Stunden

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

The Hacker News·vor 1 Tag

Novo Nordisk Breach Exposes Software Development Pipeline Risk

Dark Reading·vor 5 Tagen