Favicon
0%
Loading ...
Skip to content Skip to sidebar Skip to footer

.

GitHub Supply Chain Attack

Introduction GitHub supply chain attacks occur when attackers compromise open-source projects by injecting malicious code. This code then spreads to other projects and organizations that rely on these repositories, leading to potential data breaches, malware infections, and unauthorized access. Incident Overview On March 14, 2025, a major supply chain attack targeted the tj-actions/changed-files GitHub Action, affecting multiple…

Read More

Medusa Ransomware: A Fast Growing Threat

Introduction Ransomware remains one of the biggest threats in cybersecurity, and Medusa ransomware has quickly gained notoriety. First identified in June 2021, Medusa operates as a Ransomware-as-a-Service (RaaS), allowing cybercriminals (affiliates) to conduct attacks on organizations across different industries. In February 2025, the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the Multi-State Information Sharing and Analysis Center (MS-ISAC) issued…

Read More

Addressing the Complexity of Cloud Security: Common Threats and the Path Forward

Introduction As organizations continue to migrate to the cloud, the benefits of scalability and flexibility are clear. However, this shift brings a new set of security challenges. Cloud-related security incidents are on the rise, and each additional tool or application introduced to secure cloud environments inadvertently increases complexity—and, often, risk. In this blog, we explore…

Read More