How to mitigate risk from secrets leaks (reversinglabs.com)

Screenshot of reversinglabs.com: How to mitigate risk from secrets leaks

First screen, captured 3 years ago.

Looks similar

Screenshot of reversinglabs.com: Malware found on NPM infecting local package with reverse shell

Malware found on NPM infecting local package with reverse shell (reversinglabs.com)

203 points by gnabgib 1 year ago | 116 comments

Screenshot of praetorian.com: Public secrets exposure leads to supply chain attack on GitHub CodeQL

Public secrets exposure leads to supply chain attack on GitHub CodeQL (praetorian.com)

285 points by cyberbender 1 year ago | 53 comments

Screenshot of krebsonsecurity.com: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab

Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab (krebsonsecurity.com)

64 points by todsacerdoti 1 year ago | 24 comments

Screenshot of krebsonsecurity.com: Feds Link Cyberheist to 2022 LastPass Hacks

Feds Link Cyberheist to 2022 LastPass Hacks (krebsonsecurity.com)

365 points by todsacerdoti 1 year ago | 231 comments

KrebsOnSecurity article reporting that U.S. federal agents linked a $150 million cryptocurrency heist to master passwords cracked from the 2022 LastPass breach.

lastpass password-managers data-breach cryptocurrency-theft

Screenshot of stepsecurity.io: Axios compromised on NPM – Malicious versions drop remote access trojan

Axios compromised on NPM – Malicious versions drop remote access trojan (stepsecurity.io)

1891 points by mtud 6 months ago | 763 comments

StepSecurity blog post reporting that a hijacked maintainer account published malicious axios versions 1.14.1 and 0.30.4 on npm that drop a cross-platform RAT.

supply-chain-attack npm axios remote-access-trojan

Screenshot of defusedcyber.com: Sleeper Shells: Attackers Are Planting Dormant Backdoors in Ivanti EPMM

Sleeper Shells: Attackers Are Planting Dormant Backdoors in Ivanti EPMM (defusedcyber.com)

135 points by waihtis 8 months ago | 49 comments

Looks similar

Malware found on NPM infecting local package with reverse shell(reversinglabs.com)

Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)

Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab(krebsonsecurity.com)

Feds Link Cyberheist to 2022 LastPass Hacks(krebsonsecurity.com)

Axios compromised on NPM – Malicious versions drop remote access trojan(stepsecurity.io)

Sleeper Shells: Attackers Are Planting Dormant Backdoors in Ivanti EPMM(defusedcyber.com)