Breach

Breach

Inside the Axios Incident: Unpacking an npm Supply Chain Breach

A recent compromise of the widely-used axios HTTP client library: npm supply chains can be leveraged to drop cross-platform RATs

Tomer Filiba

|

min read

Breach

Almost Everybody is Affected: Kubernetes Privilege Escalation Can Lead to RCE

A standard Kubernetes permission has been identified as a direct path to a cluster-wide RCE.

Tomer Filiba

|

3

min read

Breach

Shai-Hulud: The Self-Replicating npm Worm Stealing Secrets and Hijacking Pipelines

A massive supply-chain attack is affecting npm packages.

Tomer Filiba

|

3

min read