Operation Triangulation: iOS devices targeted with previously unknown malware(securelist.com)

114 points by fortran77 3 years ago | 23 comments

Notepad++ supply chain attack breakdown(securelist.com)

321 points by natebc 8 months ago | 145 comments

Kaspersky Securelist research article analyzing the Notepad++ supply chain attack, its unnoticed execution chains, and new indicators of compromise.

The GitVenom campaign: cryptocurrency theft using GitHub(securelist.com)

14 points by miohtama 1 year ago | 0 comments

Phishers are hijacking legitimate cloud infrastructure(securelist.com)

46 points by lschueller 2 months ago | 13 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Passkeys – Under the Hood(research.kudelskisecurity.com)

140 points by paulgerhardt 2 years ago | 69 comments