Record · corpus.blog/posts/01a0c553-14f2-7035-9b4b-c145e3eee7f8

How Adversaries Attack APIs Through Dependencies

danaepp.com · published 28 March 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at danaepp.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 19
Words captured: 4,027

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://community.apan.org/wg/crosstalk/m/documents/432367

community.apan.org

https://xkcd.com/2347/

xkcd.com

A post-mortem of the malicious event-stream backdoor Read at the source ↗

snyk.io

https://blog.sonatype.com/bladabindi-njrat-rat-in-jdb.js-npm-malware

blog.sonatype.com

https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

medium.com

https://thehackernews.com/2022/10/new-timing-attack-against-npm-registry.html

thehackernews.com

https://octoverse.github.com/2019/

octoverse.github.com

https://www.microsoft.com/en-us/security/business/microsoft-digital-defense-report-2022.

microsoft.com

https://trojansource.codes/trojan-source.pdf

trojansource.codes

https://github.com/nickboucher/trojan-source/

github.com

https://www.bleepingcomputer.com/news/security/trojan-source-attack-method-can-hide-bugs-into-open-source-code

bleepingcomputer.com

https://www.techtarget.com/whatis/feature/SolarWinds-hack-explained-Everything-you-need-to-know

techtarget.com

https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity

whitehouse.gov

https://spdx.dev/

spdx.dev

https://cyclonedx.org/.

cyclonedx.org

https://github.com/spdx/spdx-to-osv

github.com

https://osv.dev/

osv.dev

https://cyclonedx.org/capabilities/vex/

cyclonedx.org

https://codeql.github.com/docs/codeql-overview/about-codeql/

codeql.github.com