Bash Uploaders News Today

HashiCorp is the latest victim of Codecov supply-chain attack By 02:16 AM Open-source software tools and Vault maker HashiCorp has disclosed a security incident that occurred due to the recent Codecov attack. HashiCorp, a Codecov customer, has stated that the recent Codecov supply-chain attack aimed at collecting developer credentials led to the exposure of HashiCorps GPG signing key. The private key is used by HashiCorp to sign and verify software releases, and has since been rotated as ...

Length of time the attackers spent in Codecov’s network and focus on credentials may mean they were actually after access to customers' code.

U.S. Federal Investigators Are Reportedly Looking Into Codecov Security Breach, Undetected for Months Gizmodo 2 hrs ago © Photo: Kirill Kudryavtsev/AFP (Getty Images) U.S. federal investigators are purportedly looking into a security breach at Codecov, a platform used to test software code with more 29,000 customers worldwide, Reuters reported on Saturday. The company has confirmed the breach and stated that it went undetected for months. According to Reuters, the breach has affected an un...

GovInfoSecurity Compliance DougOlenick) • April 16, 2021     Get Permission Codecov, a company that tests software code prior to release, has notified customers that attackers had access to its network for a month and placed malware in one of its systems, which may have led to the exfiltration of customers information. The company says it learned from a customer on April 1 that attackers had gained access to its Doc...

Bash Uploader Security Update   Note: If you are in the affected user group, at 6 am PT, Thursday, April 15th, we emailed your email address on file from GitHub / GitLab / Bitbucket and added a notification banner in the Codecov application after you log in. About the Event Codecov takes the security of its systems and data very seriously and we have implemented numerous safeguards to protect you. On Thursday, April 1, 2021, we learned that someone had gained unauthorized access to our Bash...