Funda kabanzi nge-Ledger Attack, isigameko se-SSC sobugebengu bokweba imininingwane ebucayi esihlolwe yisazi se-Xygeni uLuis Manuel Rodriguez Berzosa, esiveza izifundo ngokuphepha, ukuhlolwa komthelela, kanye nokusabela ezigamekweni. ...
Thola amaphakheji e-NPM anonya futhi uqinise uchungechunge lwakho lokuhlinzekwa kwesofthiwe nge-Xygeni's Early Warning Service. Kutholakale amaphakheji e-NPM anonya ayi-10 futhi kwatholakala i-vector entsha yosongo, i-djs13-fetcher. Funda ukuthi ungavikela kanjani ibhizinisi lakho kulezi zinsongo. ...
Thola ingozi yokuhlaselwa kwe-supply chain kuma-telecom, uvikele idatha, futhi wamukele i-Software Bill of Materials (SBOM) ngokuphepha kochungechunge lokunikezwa kwempahla....
Isingeniso I-Orca Security isanda kukhomba iphutha lokuklama kusevisi ye-Google Cloud Build, ebizwa ngokuthi "Bad.Build." Leli phutha libeka ingozi enkulu yokuphepha njengoba livumela abahlaseli ukuthi basebenzise i-Privilege Escalation, libanike ukungena okungagunyaziwe ezindaweni zokugcina amakhodi ze-Artifact Registry ye-Google. Imiphumela yalokhu kusengozini iyanda...
Ukuhlaziywa Kokuhlaselwa Kwe-Software Supply Chain Attacks I-3CX yinkampani eyaziwayo enikeza imikhiqizo ye-VoIP kanye ne-Unified Communications. Bathi banezinhlelo ezingaphezu kuka-600,000 kanye nabasebenzisi abayizigidi ezingu-12 nsuku zonke. Akungabazeki ukuthi iyisisulu esihehayo sabenzi bokubi. Ekupheleni kukaMashi, i-3CX yabhekana nokuhlaselwa kwe-3CX Supply Chain...
Ukuphambuka kwekhodi kubhekisela ekuguqulweni noma ekuguqulweni kwekhodi yomthombo okungagunyaziwe ngesikhathi sokuthuthukiswa, ukuhlolwa, noma ukuthunyelwa kwesicelo sesofthiwe. Lo msebenzi ononya ungaba nemiphumela emibi kakhulu, kusukela ekwethuleni ubuthakathaka bokuphepha kuya ekushintsheni ukuziphatha okuhlosiwe kwesofthiwe, okubangela ukuthi yehluleke ngezindlela ezingalindelekile. Ukuphambuka kwekhodi...
Ubuchwepheshe besofthiwe buthuthukile, futhi abaduni bathuthukile nabo. Ukuncintisana ngezikhali nabenzi bobubi kwakukhawulelwe kakhulu ekubuthakathakeni nasekuhlaselweni okuqondiswe kusofthiwe esetshenzisiwe. Ukuhlasela uchungechunge lokuhlinzekwa kwesofthiwe, yize kungabonakali, kwakungeyona into eyinhloko yabantu ababi...
