Page 2 - Bash Uploader News Today

Codecovs Bash Uploader script could be verified to check for tampering via a cryptographic checksum, but despite this it was a couple of months before the compromise was detected. The use of the script within GitHub actions was one example where the checksum was not inspected. Following the security incident, GitHub users raised an issue, "Checksum should be run on bash uploader script before execution," with one developer remarking that "the idea to directly and blindly execute a bash script p...

POLITICO Get the Weekly Cybersecurity newsletter Email Sign Up By signing up you agree to receive email newsletters or updates from POLITICO and you agree to our privacy policy and terms of service. You can unsubscribe at any time and you can contact us here. This sign-up form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Presented by With help from Eric Geller Editor’s Note: Weekly Cybersecurity is a weekly version of POLITICO Pro’s daily Cybersecuri...

Among the first of many? Software tools biz reports internal use of credential-stealing script Tim Anderson Mon 26 Apr 2021 // 19:35 UTC Share Copy HashiCorp, an open-source company whose Terraform product is widely used for automated cloud deployments, has revealed a private code-signing key was exposed thanks to the compromised Codecov script discovered earlier this month. Codecov, which provides tools to assess how much of an applications code is subject to unit tests...

HashiCorp is the latest victim of Codecov supply-chain attack By 02:16 AM Open-source software tools and Vault maker HashiCorp has disclosed a security incident that occurred due to the recent Codecov attack. HashiCorp, a Codecov customer, has stated that the recent Codecov supply-chain attack aimed at collecting developer credentials led to the exposure of HashiCorps GPG signing key. The private key is used by HashiCorp to sign and verify software releases, and has since been rotated as ...

iTWire Wednesday, 21 April 2021 11:21 Software auditing tool maker Codecov breached, upload script modified Featured Pixabay Software auditing tool maker Codecov has had its systems breached and the attackers are now reportedly using its bash uploader script to gain access to hundreds of its customers networks. The attackers were able to modify the upload script and gained access to do this because to a mistake in its creation of a Docker image. Codecov said in a state...

Codecov Supply Chain Attack May Hit Thousands: Report Phil Muncaster UK / EMEA News Reporter , Infosecurity Magazine Experts have urged organizations to reassess cyber-risk in their supply chains as it emerged that hundreds of customers of a software auditing company had their networks accessed illegally. Originally thought only to have affected the supplier, San Francisco-based Codecov, the incident is now believed to have been a deliberate supply chain attack likened in sophistication to the ...

By Juha Saarinen on Apr 20, 2021 12:14PM Scores of projects potentially affected by supply chain attack. A malicious alteration to a shell script lay undetected since January this year at software testing coverage report provider Codecov, sparking fears of another significant supply chain attack. Forensic analysis shows that an unknown threat actor exploited an error in Codecovs Docker container image creation process, and gained access to the credentia...

Hundreds of networks reportedly hacked in Codecov supply-chain attack By 03:49 AM More details have emerged on the recent Codecov system breach which is now being likened to the SolarWinds hack. In new reporting by Reuters, investigators have stated that hundreds of customer networks have been breached in the incident, expanding the scope of this system breach beyond just Codecovs systems. As reported by BleepingComputer last week, Codecov had suffered a supply-chain attack that went undete...

US authorities are investigating a hack of software auditing company Codecov - SiliconANGLE

Length of time the attackers spent in Codecov’s network and focus on credentials may mean they were actually after access to customers' code.