Supplychain - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

StarkMan

Sep 26

Artifact repositories as attack surface: 17,883 JFrog Artifactory assets and the supply chain behind them

#supplychain #exposuremanagement #jfrogartifactory #zoomeye

3 min read

Serguey Shinder

Sep 26

I Now Plan Laptops the Way Our Buyers Plan Stock

#sergueyshinder #futureofit #supplychain #hardware

2 min read

jeffrey

Sep 25

Artifact Repositories Are Trust Anchors: Incident Response for a Compromised Build Pipeline

#security #supplychain #incidentresponse #artifactory

3 min read

Ritabrata Maiti

Sep 24

GitHub got pwned through one VSCode extension. 3,800 repos.

#github #vscode #security #supplychain

5 min read

StarkMan

Sep 24

The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token

#supplychain #artifactrepository #authenticationbypass #jfrog

3 min read

jeffrey

Sep 23

The Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors

#supplychain #credentials #saassecurity

2 min read

jeffrey

Sep 23

Software Supply Chains Have an Address: Mapping Exposed Artifact Repositories with ZoomEye

#supplychain #attacksurface #zoomeye #exposuremanagement

3 min read

Oleg

Sep 22

The Ghost in the Machine: Unraveling Persistent Git Compromises Beyond Your Control

#security #github #devops #supplychain

5 min read

kozhevniko

Sep 21

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops

4 min read

Sep 21

700 Agents, 25 Actions Each, and Nothing Fired

#supplychain #secrets #aiagents

3 min read

jeffrey

Sep 20

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

#supplychain #devops #authentication #artifactrepository

4 min read

yutianle

Sep 20

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft

3 min read

kozhevniko

Sep 20

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain

3 min read

jeffrey

Sep 20

One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk

#vulnerabilitymanagement #msp #rmm #supplychain

3 min read

yutianle

Sep 20

The Default Join Key That Let Attackers Mint Admin Tokens on JFrog Artifactory

#supplychain #authenticationbypass #artifactory #cve202682329

4 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.