Azure Artifacts News Today

This article contains a listing of Agile tool providers, along with a brief description of their offerings. 

Run C# scripts, create custom functions, and automate workbooks with C#. QueryStorm is a C# IDE and runtime in Excel that fully replaces VBA.

Hosting CI/CD in the cloud can speed up interactions between development pipelines and source code repositories and make life easier for developers. There are a surprising number of options.

Microsoft’s Azure DevOps offers a feed-based artifact repository for your own and third-party code that’s well worth a look.

Tue, 09 Feb 2021 18:04 UTC A researcher managed to breach over 35 major companies internal systems, including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, in a novel software supply chain attack. The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into the companys internal applications. Unlike traditional typosquatting attacks that rely on social engineering tactics or th...

After a security researcher was able to breach Tesla, Apple and others, more than 150 copycats emerged, most claiming to be researchers. ("tesla" by smellsofbikes is licensed under CC BY-NC-SA 2.0) Pseudonymous authors published more than 150 copycat packages just three days after Sonatype published research around a software supply chain flaw, attempting to exploit the vulnerabilities in the brief window before a patch. Ethical hacker and security researcher Alex Birsan posted a blog on Feb. 9...

Researcher hacks over 35 tech firms in novel supply chain attack By A researcher managed to breach over 35 major companies internal systems, including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, in a novel software supply chain attack. The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into the companys internal applications. Unlike traditional typosquatting attacks tha...

A researcher managed to hack systems of over 35 major tech companies including Microsoft, Apple, PayPal, Shopify, Netflix, Tesla, Yelp, Tesla, and Uber in a novel software supply chain attack. For his ethical hacking research efforts, the researcher has been awarded over $130,000 in bug bounties.