A sophisticated and ongoing supply-chain attack operating for the past year has been stealing sensitive login credentials from both malicious and benevolent security personnel by infecting them with Trojanized versions of open source software from GitHub and NPM, researchers said. The campaign, first reported three weeks ago by security firm Checkmarx and again on Friday by Datadog Security Labs, uses multiple avenues to infect the devices of researchers in security and other technical fields.
Similar Stories to Yearlong Supply-chain Attack Targeting Security Pros Steals 390k Credentials on Bing News
Dan Goodin, Ars Technica
Fri, 12/13/2024 - 2:46pm
BING NEWS:
- Yearlong supply-chain attack targeting security pros steals 390K credentials
A sophisticated and ongoing supply-chain attack operating for the past year has been stealing sensitive login credentials from both malicious and benevolent security personnel by infecting them with ...
12/13/2024 - 3:46 am | View Link - More
Welcome to Wopular
Wopular is an
online newspaper rack,
giving you a summary view of the top headlines from the top news sites.
Senh Duong (Founder)
Wopular,
MWB,
RottenTomatoes
MoviesWithButter : Our Sister Site
- "Expendables 4" Starts Shooting This Fall, Says Randy Couture at the Arnold Sports Festival more
- “Expendables 4” Gets Funding Interest from “Ip Man 3” Financier more
- "Ip Man 3" Distributor Suspected of Box Office Fraud, Parent Company Loses $200M in Market Cap more
- Yen Targets "Ip Man 4" for 2018 Release; Discusses Film with Director, Producer more
- "Ip Man 3" Shatters Expectations with $72M Opening [China Box Office] more