Microsoft Secure

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem compromises observed recently. Attackers maliciously modified hundreds of publicly available packages, targeting developer environments, continuous integration and continuous delivery (CI/CD) pipelines, and cloud-connected workloads to harvest credentials and configuration secrets. The Shai‑Hulud 2.
The post Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack appeared first on Microsoft Security Blog. READ MORE HERE…

Read More
The Register

193 cybercrims arrested, accused of plotting ‘violence-as-a-service’

Minors groomed to kill and intimidate victims Nearly 200 people, including minors accused of involvement in murder plots, have been arrested over the last six months as part of Europol’s Operational Taskforce (OTF) GRIMM. The operation targets what cops call “violence-as-a-service” – crime crews recruiting kids and teens online to carry out contract killings and other real-world attacks.… READ MORE HERE…

Read More