Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'

امنیت زنجیره تأمین
خواندن متن کامل در The Register - Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

PHP2Shell will persist in enterprise environments for years

Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control. NAS devices, firewalls, VPN gateways, printers, building mana…