ttps_attack:T1078.004 × latest_source_host:unit42.paloaltonetworks.com × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · há 1d medium

AWS AWSCompromisedKeyQuarantine policy auto-quarantines IAM keys exposed on GitHub; Unit 42 tests and detection guidance

Unit 42 analyzed how AWS neutralizes publicly exposed IAM access keys by automatically attaching the AWSCompromisedKeyQuarantine managed policy, and how that policy has changed since its release on Aug. 11, 2020. The mechanism relies on the GitHub secret scanning partner program, which alerts AWS when long-term keys appear in public repos…

unit42.paloaltonetworks.com · há 1d high

DPRK-linked supply chain campaigns (ChainDrop, PolinRider) use Web3 blockchain C2 to steal cloud credentials from developer and CI/CD environments

Unit 42 reports that threat actors are moving supply chain malware C2 from hardcoded endpoints to Web3 mechanisms, so an entire botnet or worm infrastructure can be re-pointed with a single blockchain transaction. The ChainDrop npm worm (Shai-Hulud family, 400+ npm packages) and the PolinRider campaign (npm, Go modules, Packagist) target …

Alluring Pisces Sapphire Sleet technology software development