requirements.txt

• Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

  Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers Attackers exploited a GitHub Actions script injection vulnerability to publish a malicious version of the elementary-data Python CLI (v0.23.3), embedding a credential-stealing backdoor

• The serpent’s tongue: Luring the Python out of its den

  The serpent’s tongue: Luring the Python out of its den This blog examines the full lifecycle of a Python package, from hosting on repositories such as PyPI or custom web servers, through source and wheel distribution formats, to the final installation into virtual or system-wide

• The Risk of Exposed Cloud Functions and How to Harden

  The Risk of Exposed Cloud Functions and How to Harden Written by: Corné de Jong Introduction Mandiant security assessments frequently identify publicly exposed serverless applications that lack authentication, often as a result of specific business requirements. Serverless deplo

All reports →

• Connector · intel_report_ingest3