Threat actors launch zero-day attack against Python Package Index (PyPI) packages
Researchers have discovered threat actors launching zero-day attack against packages in the Python Package Index (PyPI) repository.
Application Security
NoName057(16) hacker group launched DDoS attacks against 2023 Czech presidential election linked websites
A Russian affiliated hacker group dubbed NoName057(16) has launched DDoS attacks against 2023 Czech presidential election.
Okta’s GitHub source code repositories hacked
Okta, a leading solution provider of identity and access management solutions, has confirmed their private GitHub repositories were hacked this month.
Intel reports leak of Alder Lake BIOS source code
Chipmaker Intel has confirmed a leak of its Alder Lake BIOS source code, as revealed on 4chan and GitHub. However, the hacker’s origin (or root cause) remains unknown.
Cybercriminals use proxies and configurations to launch credential stuffing attacks
The Federal Bureau of Investigation (FBI) have spotted cybercriminals using proxies and configurations to launch credential stuffing attacks against US companies.
Django fixes High severity SQL injection vulnerability (CVE-2022-34265)
Django has released a security fix for a High severity SQL injection vulnerability (CVE-2022-34265) in Django 4.0.6 and 3.2.14.
GitLab issues security update for Critical hard-coded password vulnerability (CVE-2022-1162)
GitLab has issued a security update to address a Critical vulnerability CVE-2022-1162 where static passwords were inadvertently set during OmniAuth-based registration.
DevSecOps best practices to secure cloud-native and microservices-based applications
The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-204C “Implementation of DevSecOps for a Microservices-based Application with Service Mesh.” The guidelines include many best practices on how organizations and secure their CI/CD pipeline and enhance the software delivery processes.
NIST SP 800-204C: Implementation of DevSecOps for a Microservices-based Application with Service Mesh
he National Institute of Standards and Technology (NIST) has issued the NIST SP 800-204C “Implementation of DevSecOps for a Microservices-based Application with Service Mesh.”
NotLegit: 4-year old Microsoft Azure App Service 0-day vulnerability affects source code repositories
A four-year old Microsoft Azure App Service 0-day vulnerability dubbed “NotLegit” affects hundreds of source code repositories.