Blogs

Codecov Breach: Lessons Learned from the CI Poisoning Attack

Aquasec

A recent security incident disclosed by Codecov has again placed the spotlight on supply chain attacks.

Visit Site

Codecov Breach: Lessons Learned from the CI Poisoning Attack
Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s EnvironmentsAquasec Malware Forensic Analysis: Capturing What Attackers Leave BehindAquasec Cloud Workload Security: Aqua Shines in GigaOm's Radar ReportAquasec Deceptive Deprecation: The Truth About npm Deprecated PackagesAquasec Aqua and HashiCorp Enable Cloud Native Security, Zero-Trust ApproachesAquasec Sink or Swim: Tackling 2024's Record-Breaking Vulnerability WaveAquasec Lessons Swift Designer Chris Lattner Has Learned about LeadershipThenewstack How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Go 2017 Survey Results - The Go Programming LanguageGo Go 2018 Survey Results - The Go Programming LanguageGo Building a Remote MCP Server: OAuth, Tool Design & Lessons from 4,000+ AI Queries | MotherDuckMotherduck How To Create and Use Avatars in eLearningHeygen AGENTS.md outperforms skills in our agent evalsVercel Build Your Own PluginVercel Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket Lessons Learned from a Year of Testing the Web PlatformCss Tricks Protecting Against CDN Cache PoisoningBunny