Github Actions Supply Chain Attacks

31/03/2025 42 min Temporada 2025 Episodio 324
Github Actions Supply Chain Attacks

Listen "Github Actions Supply Chain Attacks"

Episode Synopsis

This week, we discuss a recent cascading supply chain attack involving multiple Github actions workflows that nearly succeeded in compromising a popular Coinbase application. Before that, we discuss a novel way to download malware onto an endpoint by abusing a web browser's caching feature. Additionally, we cover an FBI alert on file converter malware scams.