#credential-rotation

[ follow ]
#supply-chain-attacks #developer-tools-security #malicious-vs-code-extensions #repository-exfiltration
#supply-chain-attacks
fromSecurityWeek
1 week ago
Information security

GitHub Confirms Hack Impacting 3,800 Internal Repositories

About 3,800 GitHub internal repositories were exfiltrated after a poisoned VS Code extension compromised an employee workstation, prompting secret rotation and ongoing monitoring.
Information security
fromSecurityWeek
1 week ago

GitHub Confirms Hack Impacting 3,800 Internal Repositories

About 3,800 GitHub internal repositories were exfiltrated after a poisoned VS Code extension compromised an employee workstation, prompting secret rotation and ongoing monitoring.
more#supply-chain-attacks
Information security
fromTechzine Global
2 weeks ago

Checkmarx Jenkins plugin compromised in new supply chain attack

A backdoored Checkmarx Jenkins AST plugin release compromises Jenkins instances, requiring immediate plugin replacement and full secret rotation across multiple credential types.
[ Load more ]