GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects

Caute_cautim — Mon, 19 Aug 2024 21:09:29 GMT

Hi All

Cloud services and thus millions of end users who access them could have been affected by the poisoning of artifacts in the development workflow of open source projects.

Researchers have uncovered an attack vector that affected GitHub open source projects owned by Google, Microsoft, Amazon Web Services, and others, executed by abusing artifacts generated as part of software-development workflows.

Researchers at Palo Alto Networks' Unit 42 discovered the attack, which was effective against "high-profile open source projects owned by the biggest companies in the world," according to a blog post published by lead researcher Yaron Avital yesterday. Compromise of those projects, then, "could have led to a potential impact on millions of their consumers."

https://www.darkreading.com/cloud-security/github-attack-vector-google-microsoft-aws-projects

Regards

Caute_Cautim

topic GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects in Threats

GitHub Attack Vector Cracks Open Google, Microsoft, AWS Projects