Researcher hacks over 35 tech firms in novel supply chain attack
Researcher hacks over 35 tech firms in novel supply chain attack By A researcher managed to breach over 35 major companies' internal systems, including Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, in a novel software supply chain attack. The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into the company's internal applications. Unlike traditional typosquatting attacks that rely on social engineering tactics or the victim misspelling a package name, this particular sup...