DiscoverThe 443 - Security SimplifiedGithub Actions Supply Chain Attacks
Github Actions Supply Chain Attacks

Github Actions Supply Chain Attacks

Update: 2025-03-31
Share

Description

This week, we discuss a recent cascading supply chain attack involving multiple Github actions workflows that nearly succeeded in compromising a popular Coinbase application. Before that, we discuss a novel way to download malware onto an endpoint by abusing a web browser's caching feature. Additionally, we cover an FBI alert on file converter malware scams.

Comments 
loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Github Actions Supply Chain Attacks

Github Actions Supply Chain Attacks

Secplicity