#supply-chain-attack
#supply-chain-attack
[ follow ]
#npm #cybersecurity #malware #phishing #oauth-token-theft #unc6395 #npm-packages #cryptocurrency-malware #salesforce
Information security
fromTechCrunch
5 days agoSalesloft says Drift customer data thefts linked to March GitHub account hack | TechCrunch
A March GitHub breach at Salesloft allowed theft of authentication and OAuth tokens, enabling mass hacks of multiple large tech customers and a supply-chain compromise.
Information security
fromDataBreaches.Net
1 week agoSalesloft Drift Breach Rolls Up Cloudflare, Palo Alto, Zscaler, and Others - DataBreaches.Net
Supply-chain attacks exploiting a Salesloft/Drift Salesforce OAuth vulnerability compromised customer Salesforce instances at Cloudflare, Palo Alto Networks, Zscaler, SpyCloud, PagerDuty, and hundreds more.
fromTechzine Global
1 week agoHackers steal customer data from Zscaler via Salesloft leak
Following a previous series of victims, Zscaler has also been affected by a hacked Salesforce Drift instance. This resulted in the theft of customer data and information about support cases. Zscaler warns that hackers stole sensitive customer data after gaining access to their Salesforce environment. The stolen data includes customer names, email addresses, job titles, phone numbers, and location data. In addition, product licenses, commercial information, and the content of certain support cases have also been compromised.
Information security
fromCSO Online
1 month agoSupply chain attack compromises npm packages to spread backdoor malware
In a newly discovered supply chain attack, attackers last week targeted a range of npm-hosted JavaScript type testing utilities, several of which were successfully compromised to distribute malware.
JavaScript
Software development
fromInfoQ
4 months agoGoogle Go Module Mirror Served Backdoor for 3+ Years
Research uncovered a major supply chain attack in the Go ecosystem involving a backdoored package.
The attack exploited caching in the Go Module Proxy, emphasizing security vulnerabilities in module management.
[ Load more ]