/
attack_type:supply_chain × victim_sectors:technology × latest_source_host:bleepingcomputer.com × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · high

OVHcloud CLI releases 0.11.0-0.15.0 backdoored on GitHub after developer account hijack, stealing secrets from disk

OVHcloud disclosed that attackers hijacked a developer's GitHub account and used it to modify the open-source OVHcloud CLI repository, publishing trojanized releases 0.11.0 through 0.15.0 that carry information-stealing malware. According to CEO Octave Klaba, the malicious release appeared at 14:47 on October 19 and was detected and block…

GlassWorm technology cloud services
bleepingcomputer.com · critical

ConnectWise Cloud Backup (SkyKick) supply-chain attack abuses service principals to breach Microsoft 365 tenants

ConnectWise shut down its Cloud Backup service (formerly SkyKick Cloud Backup) after an attacker gained unauthorized access to application identities and used them to compromise Microsoft 365 tenants. Huntress identified at least 162 compromised tenants in its environment, and Microsoft Threat Intelligence characterized the incident as an…

managed service providers technology