Supply Chain

• 

  At least 10 APT groups are actively exploiting Microsoft Exchange vulnerabilities

  Advanced Persistent Threat (APT), Hacking, Patching, Ransomware, Supply Chain

At least 10 APT groups are actively exploiting Microsoft Exchange vulnerabilities

kiowa2021-03-16T14:12:20+00:00March 12th, 2021|Advanced Persistent Threat (APT), Hacking, Patching, Ransomware, Supply Chain|

ESET: Some Attacks Happened Before Microsoft Was Notified of Vulnerabilities [...]

Read More

Comments Off on At least 10 APT groups are actively exploiting Microsoft Exchange vulnerabilities

• 

  Chinese hackers targeted SolarWinds customers in parallel with Russian op

  Advanced Persistent Threat (APT), Hacking, Supply Chain

Chinese hackers targeted SolarWinds customers in parallel with Russian op

kiowa2021-03-10T08:21:24+00:00March 10th, 2021|Advanced Persistent Threat (APT), Hacking, Supply Chain|

New data suggests that Russia wasn't the only nation-state hacking [...]

Read More

Comments Off on Chinese hackers targeted SolarWinds customers in parallel with Russian op

• 

  Open source ‘dependency confusion’: Software repositories play ‘whack-a-mole’ as ‘dependency confusion’ copycats exceed 5,000

  Hacking, Secure coding, Supply Chain

Open source ‘dependency confusion’: Software repositories play ‘whack-a-mole’ as ‘dependency confusion’ copycats exceed 5,000

kiowa2021-03-08T11:24:55+00:00March 8th, 2021|Hacking, Secure coding, Supply Chain|

Maintainers of the NPM Registry and Python Package Index (PyPI) [...]

Read More

Comments Off on Open source ‘dependency confusion’: Software repositories play ‘whack-a-mole’ as ‘dependency confusion’ copycats exceed 5,000

• 

  Exploitation of Accellion File Transfer Appliance

  Advanced Persistent Threat (APT), Data breach, Patching, Supply Chain

Exploitation of Accellion File Transfer Appliance

kiowa2021-02-25T08:33:26+00:00February 25th, 2021|Advanced Persistent Threat (APT), Data breach, Patching, Supply Chain|

Septu comment:  An unusual alert from Cybersecurity and Infrastructure Security [...]

Read More

Comments Off on Exploitation of Accellion File Transfer Appliance

• 

  Software supply chain attacks – everything you need to know

  Advanced Persistent Threat (APT), Supply Chain

Software supply chain attacks – everything you need to know

kiowa2021-02-15T08:15:26+00:00February 15th, 2021|Advanced Persistent Threat (APT), Supply Chain|

Septu comment:  A good explanation and review of software supply [...]

Read More

Comments Off on Software supply chain attacks – everything you need to know