Tag: #supply-chain-attack33 results
Cybercrime group TeamPCP exploited a supply chain attack on open-source security tool Trivy to breach the European Commission's AWS infrastructure, stealing 92 GB of compressed data. ShinyHunters then published the stolen data, including emails and personal details. CERT-EU attributed the incident to TeamPCP.
A sophisticated supply chain attack targeted the open-source Axios HTTP client using stolen developer credentials to distribute malware. The incident highlights vulnerabilities in under-resourced open-source projects critical to Big Tech like Apple. It calls for increased funding and security investments in open-source infrastructure.
TeamPCP hackers defaced Aqua Security's internal GitHub repositories. The breach was facilitated by credentials stolen during a supply chain attack on Trivy, Aqua Security's open-source vulnerability scanner.