Breach

Breach

Inside the Axios Incident: Unpacking an npm Supply Chain Breach

A recent compromise of the widely-used axios HTTP client library: npm supply chains can be leveraged to drop cross-platform RATs

Tomer Filiba

|

min read

Breach

Inside the Trivy Incident: Unpacking a CI/CD Supply Chain Breach?

A deep dive into the Trivy supply chain attack and how CI/CD pipelines were exploited to steal credentials. Learn key indicators, risks, and

Sweet team

|

5

min read

Breach

Almost Everybody is Affected: Kubernetes Privilege Escalation Can Lead to RCE

A standard Kubernetes permission has been identified as a direct path to a cluster-wide RCE.

Tomer Filiba

|

3

min read

Breach

Shai-Hulud: The Self-Replicating npm Worm Stealing Secrets and Hijacking Pipelines

A massive supply-chain attack is affecting npm packages.

Tomer Filiba

|

3

min read