#supply-chain attack
#supply-chain attack
[ follow ]
#supply-chain-attack #npm #cybersecurity #malware #phishing #data-breach #oauth-token-theft #unc6395 #npm-packages
#supply-chain-attack
Information security
fromThe Hacker News
1 month agoWeekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More
OAuth token theft via a Salesloft-Drift integration exposed Salesforce data across major tech firms, underscoring integration fragility and supply-chain security risks.
Information security
fromDataBreaches.Net
1 month agoSalesloft Drift Breach Rolls Up Cloudflare, Palo Alto, Zscaler, and Others - DataBreaches.Net
Supply-chain attacks exploiting a Salesloft/Drift Salesforce OAuth vulnerability compromised customer Salesforce instances at Cloudflare, Palo Alto Networks, Zscaler, SpyCloud, PagerDuty, and hundreds more.
Information security
fromThe Hacker News
3 weeks agoTwo Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models
Two critical authentication-bypass vulnerabilities in Wondershare RepairIt exposed unencrypted user data and cloud resources, enabling AI model tampering, supply-chain attacks, and remote code execution.
Information security
fromTechCrunch
1 month agoSalesloft says Drift customer data thefts linked to March GitHub account hack | TechCrunch
A March GitHub breach at Salesloft allowed theft of authentication and OAuth tokens, enabling mass hacks of multiple large tech customers and a supply-chain compromise.
Information security
fromThe Hacker News
1 month agoMalicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
Four npm packages impersonating Flashbots exfiltrate Ethereum private keys and mnemonic seeds to a Telegram bot and redirect unsigned transactions to attacker-controlled wallets.
fromTechzine Global
1 month agoHackers steal customer data from Zscaler via Salesloft leak
Following a previous series of victims, Zscaler has also been affected by a hacked Salesforce Drift instance. This resulted in the theft of customer data and information about support cases. Zscaler warns that hackers stole sensitive customer data after gaining access to their Salesforce environment. The stolen data includes customer names, email addresses, job titles, phone numbers, and location data. In addition, product licenses, commercial information, and the content of certain support cases have also been compromised.
Information security
[ Load more ]