Unidentified threat actors used multiple tactics to launch a sophisticated software supply-chain campaign targeting developers on the GitHub platform, including members of the popular Top.gg community that includes more than 170,000 members. The attackers used a range of tactics and techniques, from leveraging stolen browser cookies to take over accounts to contributing malicious code with..

The post Complex Supply Chain Attack Targets GitHub Developers appeared first on Security Boulevard.

The post Application Security Trends & Challenges with Tanya Janca appeared first on Shared Security Podcast.

The post Application Security Trends & Challenges with Tanya Janca appeared first on Security Boulevard.

The post Unveiling BlazeStealer Malware Python Packages on PyPI appeared first on TuxCare.

The post Unveiling BlazeStealer Malware Python Packages on PyPI appeared first on Security Boulevard.

A new vulnerability found in GitHub’s operations could have given bad actors another way of getting around the code hosting platform’s security protections and exposing thousands of code packages to being hijacked. A hacker could have exploited the vulnerability to run a Repojacking attack by getting around GitHub’s popular repository namespace retirement mechanism, a tool..

The post GitHub Vulnerability Put Code Packages at Risk of Repojacking appeared first on Security Boulevard.

Software development is a global effort, with DevOps teams often dispersed around the world. According to Statista, there will be over 27.7 million developers worldwide in 2023. That’s a lot of engineers creating millions of lines of code each day, all of which are orchestrated within an enterprise’s DevOps workflow. With large amounts of code authored..

The post National Cybersecurity Strategy Requires Orgs to Rethink Software Quality appeared first on Security Boulevard.

The post Augmented Software Engineering in an AI Era appeared first on Blog.

The post Augmented Software Engineering in an AI Era appeared first on Security Boulevard.

The benefits of threat modeling are significant. Not only does it provide a systematic process for evaluating potential threats to an organization’s system, but it also creates a framework for informed decision-making, ensuring the best use of limited resources. Despite threat modeling existing as a proven way to mitigate risk, in 2021, we saw a..

The post Debunking Three Common Threat Modeling Myths appeared first on Security Boulevard.

The post LoginRadius Launches a CLI for Enterprise Dashboard appeared first on Security Boulevard.

The 2022 Forrester Research survey, “Breaches By The Numbers: Adapting To Regional Challenges Is Imperative,” found that 63% of organizations were breached in the past year. It also showed that attackers are shifting their focus from targeting vulnerable infrastructure to targeting the code within applications.

The post New Contrast Learning Hub and Community Platform | Blog appeared first on Security Boulevard.

The post Facebook Doesn’t Know Where Your Data Is, New Hire Spearmishing Attack, Smart Thermostat Lock Out appeared first on The Shared Security Show.

The post Facebook Doesn’t Know Where Your Data Is, New Hire Spearmishing Attack, Smart Thermostat Lock Out appeared first on Security Boulevard.