Skip to content

“Researchers say an automated supply chain campaign dubbed…” — CyberWire Daily at 7:19

CyberWire Daily Attackers found a new way around MFA.

“Researchers say an automated supply chain campaign dubbed Megalodon compromised more than 5,000 GitHub repositories by injecting malicious GitHub Actions workflows through fake pull requests and forged bot identities. According to Safedep, the attackers used Base64-encoded bash payloads designed to steal cloud…”

0:00 26:07