Adversarial Podcast S4E03 – Fumbled NPM Attack, Entering the AI Browser Market, Salesloft breach

The Adversarial Podcast by Jerry Perullo, Sounil Yu, Mario Duarte

Episode notes

00:00 Intro

03:10 NPM supply chain attack leaves attackers empty handed

24:44 Why is Atlassian buying a browser company?

37:20 Apple's new Memory Integrity Enforcement

52:56 Salesloft breach leads to downstream hacks

Hackers left empty-handed after massive NPM supply-chain attack

Hackers briefly compromised popular NPM packages like chalk and debug-js, infecting ~10% of cloud environments, but despite the massive supply-chain reach they only netted about $600 in stolen cryptocurrency.

https://www.bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive- ... 

 ...  Read more
Keywords
cybercybersecuritychief information security officersecuritycisochief technology officerchief information officeradversarialcomputer security