DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GitHub got pwned through one VSCode extension. 3,800 repos.
ritabratamaiti profile

GitHub got pwned through one VSCode extension. 3,800 repos.

#github #vscode #security #supplychain
Comments
5 min read
The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token
stark_zhuang_df5076f35c68 profile

The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token

#supplychain #artifactrepository #authenticationbypass #jfrog
Comments
3 min read
The Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors
jeffreyciend profile

The Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors

#supplychain #credentials #saassecurity
Comments
2 min read
Software Supply Chains Have an Address: Mapping Exposed Artifact Repositories with ZoomEye
jeffreyciend profile

Software Supply Chains Have an Address: Mapping Exposed Artifact Repositories with ZoomEye

#supplychain #attacksurface #zoomeye #exposuremanagement
Comments
3 min read
The Ghost in the Machine: Unraveling Persistent Git Compromises Beyond Your Control
devactivity profile
Oleg

The Ghost in the Machine: Unraveling Persistent Git Compromises Beyond Your Control

#security #github #devops #supplychain
Comments
5 min read
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
700 Agents, 25 Actions Each, and Nothing Fired
secbyjasonmiller profile

700 Agents, 25 Actions Each, and Nothing Fired

#supplychain #secrets #aiagents
Comments
3 min read
The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass
jeffreyciend profile

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

#supplychain #devops #authentication #artifactrepository
Comments
4 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces
kozhevniko profile

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain
Comments
3 min read
One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk
jeffreyciend profile

One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk

#vulnerabilitymanagement #msp #rmm #supplychain
Comments
3 min read
The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory
bianliang profile

The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory

#supplychain #authenticationbypass #artifactory #cve202682329
Comments
4 min read
From Warehouses to Algorithms: How JD Logistics Builds a Technology-Driven Supply Chain
lyee_blair_a5996ecaf9cd2b profile

From Warehouses to Algorithms: How JD Logistics Builds a Technology-Driven Supply Chain

#jdlogistics #jingdong #supplychain #ai
Comments
7 min read
Your coding agent installed 23 packages in a minute. Your SBOM saw zero.
secbyjasonmiller profile

Your coding agent installed 23 packages in a minute. Your SBOM saw zero.

#supplychain #aiagents
Comments
3 min read
Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling
jeffreyciend profile

Your Coding Agent Reads the Repository Before You Do: Configuration Injection in AI Developer Tooling

#aisecurity #supplychain #developertooling #appsec
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.