Tag: incident
-
Hacker News: Okta Bcrypt incident lessons for designing better APIs
Source URL: https://n0rdy.foo/posts/20250121/okta-bcrypt-lessons-for-better-apis/ Source: Hacker News Title: Okta Bcrypt incident lessons for designing better APIs Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a security incident involving Okta and the vulnerabilities associated with the Bcrypt hashing algorithm when utilized improperly. It highlights how the lack of input validation in some cryptographic…
-
The Register: US cranks up espionage charges against ex-Googler accused of trade secrets heist
Source URL: https://www.theregister.com/2025/02/05/google_espionage_charges/ Source: The Register Title: US cranks up espionage charges against ex-Googler accused of trade secrets heist Feedly Summary: Mountain View clocked onto the scheme with days to spare A Chinese national faces a substantial stint in prison and heavy fines if found guilty of several additional charges related to economic espionage and…
-
The Register: Poisoned Go programming language package lay undetected for 3 years
Source URL: https://www.theregister.com/2025/02/04/golang_supply_chain_attack/ Source: The Register Title: Poisoned Go programming language package lay undetected for 3 years Feedly Summary: Researcher says ecosystem’s auto-caching is a net positive but presents exploitable quirks A security researcher says a backdoor masquerading as a legitimate Go programming language package used by thousands of organizations was left undetected for years.……
-
Anchore: SBOM Management: How to Tackle Sprawl and Secure Your Supply Chain
Source URL: https://anchore.com/blog/sbom-management-how-to-tackle-sprawl-and-secure-your-supply-chain/ Source: Anchore Title: SBOM Management: How to Tackle Sprawl and Secure Your Supply Chain Feedly Summary: Software Bill of Materials (SBOM) has emerged as a pivotal technology to scale product innovation while taming the inevitable growth of complexity of modern software development. SBOMs are typically thought of as a comprehensive inventory of…