Browsing Tag
Microsoft Threat Intelligence
2 posts
Inside the Chaindrop Supply Chain Attack
ChainDrop didn’t exploit a vulnerability. It stole a maintainer’s credentials, then used npm’s own publishing machinery to replicate across 1,300+ packages.
Weekly Top 10 – 12.11.2023- CVE’s Impacting Atlassian Products, Flaws in UEFI Leave Devices Open to Bootkit Infections, Fake WordPress Security Advisory Used to Deliver Malware, and more.
WEEKLY TOP TEN | December 11, 2023, 15:00 GMT Our Threat Operations and Intelligence team compiles a daily…