Multi-Factor Authentication Fatigue Key Factor in Uber Breach

Earlier this week, Uber disclosed that the recent breach it suffered was made possible through a multi-factor fatigue (MFA) attack where the attacker disguised themselves as Uber IT.

NPM Package Masquerading as Popular Material Tailwind Library To Install Malicious Code

Researchers at ReversingLabs discovered a malicious npm package masquerading as the Material Tailwind library. Their finding highlights a new trend for threat actors to install malicious code, dubbed impostor packages, say the researchers.

GitLab Cloud Seed Aims to Simplify Google Cloud Integration

At Google Next ’22, GitLab launched GitLab Cloud Seed, a new open-source solution integrated in GitLab One DevOps platform that aims to simplify Google Cloud account management, deployment to Google Cloud Run, and Google SQL database provisioning.

NCC Group Dissect Aims to Scale Incident Response to Thousands of Systems

Developed at Fox-IT, part of NCC Group, Dissect is a recently open-sourced toolset that aims to enable incident response on thousands of systems at a time by analyzing large volumes of forensic data at high speed, says Fox-IT.

Two New Git Vulnerabilities Affecting Local Clones and Git Shell Patched

Two Git vulnerabilities affecting local clones and git shell interactive mode in version 2.38 and older have been recently patched.