#developer-account-compromise

[ follow ]
#software-supply-chain-attacks #malicious-browseride-extensions #cicd-pipeline-intrusion
Information security
fromTechzine Global
2 days ago

CrowdStrike takes down Glassworm botnet

Glassworm used compromised developer accounts and malicious extensions and packages to infiltrate CI/CD pipelines, enabling credential theft, data theft, and remote control at scale.
Information security
fromTechCrunch
2 days ago

CrowdStrike and Google take down botnet used by hackers to target software developers in supply chain attacks | TechCrunch

Glassworm botnet takedown disrupted malware and password theft targeting open-source developers and supply-chain trust.
[ Load more ]