#supplychainsecurity

From opalsec.io

Daily News Update: Friday, April 4, 2025 (Australia/Melbourne)

1 1

Chinese group exploiting Ivanti RCE bug since mid-March to drop web shells; DNS Fast Flux increasingly used by cyber crims & nation-states; GitHub Supply Chain attack traced to leaked Access Token in a CI workflow; Oracle says breach is of legacy system - receipts show otherwise.

#dns #cisa #github #ivanti #oracle #infosec #privacy #ukraine #zeroday #aiincyber

12h ago

From thedefendopsdiaries.com

Addressing Vulnerabilities in the GitHub Actions Ecosystem | The DefendOps Diaries

1 1

Explore vulnerabilities in GitHub Actions and learn secure token management to prevent supply chain attacks.

#devsecops #infosecurity #githubactions #tokenmanagement #supplychainsecurity

16h ago