Dark Reading Oct 28, 7:39 PM

GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub

The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.

1 min read Read

Dark Reading Oct 27, 7:58 PM

SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack

A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises.

1 min read Read

Dark Reading Oct 26, 6:01 PM

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

1 min read Read

Dark Reading Oct 22, 8:42 PM

Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.

1 min read Read