#developer-account-compromise

[ follow ]
#software-supply-chain-attacks #malicious-browseride-extensions #cicd-pipeline-intrusion
Information security
fromTechzine Global
2 hours ago

CrowdStrike takes down Glassworm botnet

Glassworm used compromised developer accounts and malicious extensions and packages to infiltrate CI/CD pipelines, enabling credential theft, data theft, and remote control at scale.
Information security
fromTechCrunch
17 hours ago

CrowdStrike and Google take down botnet used by hackers to target software developers in supply chain attacks | TechCrunch

Glassworm botnet takedown disrupted malware and password theft targeting open-source developers and supply-chain trust.
[ Load more ]