Tag

credentials

8 articles

Latest in credentials

Hackers Inject Credential-Stealer, RAT Into LiteLLM

Attackers compromised a version of LiteLLM this week by injecting malicious code into all seven of its published Python wheels on PyPI, delivering a package that included an infostealer to exfiltrate credentials and secrets and a…

Oct 23, 20263 min

All credentials Articles

Showing 1–8 of 8

May15

Blogs

Widespread Mini Shai-Hulud Campaign Is a Matter of Trust

The latest series of attacks using the notorious Shai-Hulud worm puts into sharp focus the threats facing software developers and their CI/CD pipelines, an issue that has been rais…

3 min

Apr06

DevSecOps

Bad Actor Drops 36 Malicious Packages in npm, Targets Guardarian Users

The npm code repository is again being used by a bad actor to launch a supply chain attack that includes three dozen malicious packages that appear as Strapi CMS plugins but delive…

3 min

Mar25

Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM

The supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand,…

3 min

Mar11

Blogs

Analysis of GitHub Repositories Surfaces Nearly 23M Secrets

An analysis of public GitHub repositories published today finds 22.8 million hardcoded secrets, representing a 25% increase since a similar study was done a year ago.

3 min

Apr11

Blogs

HashiCorp Extends Secrets Management Reach

Secrets management is core to DevSecOps—how credentials are managed can make all the difference in preventing an application from being compromised in the first place. The challeng…

3 min

Dec05

Blogs

Moving Security Beyond SSH and PKI

SSH (secure shell) is still the most common method of remotely accessing a Linux server, which makes it a common target for attackers attempting to infiltrate corporate networks. W…

3 min

Apr14

Blogs

DevOps and Database Security

Osterman Research recently released a survey-based report on database security. The results don’t exactly instill confidence where username breaches are concerned: While more than…

3 min