Tag: developer-security
| # | Post Title | Date | User |
| Fake Go module lure networks: what AppSec teams need to know | 2 months ago | NHI Mgmt Group | |
| NuGet tools as code execution: what AppSec teams need to watch | 2 months ago | NHI Mgmt Group | |
| RubyGems sleeper compromise and developer workstation persistence risks | 2 months ago | NHI Mgmt Group | |
| Lightning PyPI compromise: what this means for secrets and CI controls | 2 months ago | NHI Mgmt Group | |
| Developer secrets in ChainDrop: what data teams missed | 2 months ago | NHI Mgmt Group | |
| Public package RATs using JSON-bin relays: what teams should watch | 2 months ago | NHI Mgmt Group | |
| Five supply chain attacks in 48 hours: are your controls layered enough? | 2 months ago | NHI Mgmt Group | |
| GitHub account compromise and Shai-Hulud: what IAM teams missed | 2 months ago | NHI Mgmt Group | |
| Malicious npm clusters: where package trust breaks down in practice | 2 months ago | NHI Mgmt Group | |
| Package trust in the Atomic Arch campaign: what IAM teams should note | 2 months ago | NHI Mgmt Group | |