CROC News: Malicious Repos, Bandwidth Theft, & NVD or NoVD?

Crying Out Cloud

🎙️ What is a better way to stay updated on cloud security than a NEW Crying Out Cloud episode! Join Eden Naftali and Amitai Cohen as they explore what is new and 🔥: 👾 Open-source repos flooded by malicious code. 💻 What is to become of the National Vulnerability Database? ⛓️ Proof of bandwidth cryptojacking 🛠️ Critical vulnerabilities discovered in popular CI/CD tool

Links:

• https://apiiro.com/blog/malicious-code-campaign-github-repo-confusion-attack/

• https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/

• https://research.openanalysis.net/github/lua/2024/03/03/lua-malware.html

• https://resilientcyber.substack.com/p/death-knell-of-the-nvd

• https://sysdig.com/blog/cloud-threats-deploying-crypto-cdn/