Codecov Bitrise News Today

iTWire Wednesday, 21 April 2021 11:21 Software auditing tool maker Codecov breached, upload script modified Featured Pixabay Software auditing tool maker Codecov has had its systems breached and the attackers are now reportedly using its bash uploader script to gain access to hundreds of its customers networks. The attackers were able to modify the upload script and gained access to do this because to a mistake in its creation of a Docker image. Codecov said in a state...

By Juha Saarinen on Apr 20, 2021 12:14PM Scores of projects potentially affected by supply chain attack. A malicious alteration to a shell script lay undetected since January this year at software testing coverage report provider Codecov, sparking fears of another significant supply chain attack. Forensic analysis shows that an unknown threat actor exploited an error in Codecovs Docker container image creation process, and gained access to the credentia...

Length of time the attackers spent in Codecov’s network and focus on credentials may mean they were actually after access to customers' code.

U.S. Federal Investigators Are Reportedly Looking Into Codecov Security Breach, Undetected for Months Gizmodo 2 hrs ago © Photo: Kirill Kudryavtsev/AFP (Getty Images) U.S. federal investigators are purportedly looking into a security breach at Codecov, a platform used to test software code with more 29,000 customers worldwide, Reuters reported on Saturday. The company has confirmed the breach and stated that it went undetected for months. According to Reuters, the breach has affected an un...