Source Code
Twitter Presses GitHub to Turn Over User Who Leaked Source Code
When Twitter joined the ranks of tech companies whose source code leaked online, it was met with little surprise and a whole lot of unease over what the leak might mean for ...
‘Sophisticated’ Threat Actor Stole GoDaddy Code
Threat actors lingered in GoDaddy’s systems, installing malware and stealing source code in a security incident that lasted years. After receiving complaints from a few customers in December that their websites were ...
LastPass Password Vaults Stolen, Pig Butchering Scams, Okta Source Code Theft
Things get worse for LastPass as a security breach in November resulted in the theft of customer data, including encrypted password vaults and unencrypted web addresses. Pig butchering scams, a variation of ...
Amazon Echos Hack Themselves, Fraud Is Flourishing on Zelle, Samsung Galaxy Source Code Stolen
A new attack uses Alexa’s functionality to force Amazon Echo devices to make self-issued commands, payment app Zelle has become popular with fraudsters and banks don’t seem to care, and details about ...
Babuk ransomware builder leaked following muddled “retirement”
Heads are being scratched after the Babuk ransomware builder appears on VirtuTotal, adding to the gang's reputation for confusion. Categories: RansomwareReports Tags: BabukdecryptionMPDraassource codevirustotal (Read more...) The post Babuk ransomware builder leaked ...
Bringing Source Code Security Up to Speed
In many ways, the DevOps movement is about removing complexity in the development process to increase release velocity and efficiency. While those abstractions may increase simplicity and narrow focus for developers, the ...
Stolen Source Code, Apple Zero-Days, Biden’s Privacy and Cybersecurity Policies
In episode 147 for November 16th 2020: The latest about source code stolen from US government agencies and private companies, three actively exploited iOS zero-days in the wild and new App Store ...
Advancing Open Source Innovation in Cybersecurity
OIN seeks to secure the inclusion of open source in technology without fear of litigation from patent trolls Due to the convergence of an escalation in the number of security vulnerabilities, an ...
Defend Against Magecart-Style Website Supply Chain Attacks
We’ve seen an acceleration of attacks from Magecart threat actors and their JavaScript credit card and personal information-skimming attacks. In the past two months, British Airways, Feedify, the ABS-CBN Store, the UAAP ...
Git Vulnerability Leads to Remote Code Execution
A new version of the widely used Git version control system fixes a vulnerability that allows malicious code repositories to execute code on client computers when being cloned. Originally created for Linux ...
