Supply Chain Attacks 19 articles

Summary Backdoored Software Components refer to legitimate software libraries or modules that have been intentionally compromised with hidden malicious code, allowing attackers unauthorized access or control within an application or…

Summary Build Pipeline Attacks target the software development and deployment process by compromising continuous integration and continuous delivery (CI/CD) pipelines to inject malicious code or manipulate build artifacts, enabling attackers…

Summary CI/CD Pipeline Attacks target the continuous integration and continuous deployment processes to inject malicious code, manipulate builds, or compromise software delivery, leading to widespread distribution of compromised applications. Key…

Summary Cloud Service Provider Supply Chain Attacks target vulnerabilities within cloud service providers to compromise multiple downstream customers by exploiting trust relationships and shared infrastructure. Key Characteristics Exploitation of third-party…

Summary Compromised Development Tools refer to the manipulation or infiltration of software development environments and tools to introduce vulnerabilities, backdoors, or malicious code into applications during the development process. Attackers…

Summary Compromised Open-Source Libraries refer to the malicious manipulation or exploitation of publicly available software components to introduce vulnerabilities or backdoors into applications. Attackers target widely used libraries to distribute…

Summary Dependency Confusion Attacks exploit the trust in internal and external software package repositories by injecting malicious code into public package registries, causing organizations to unknowingly download and execute harmful…

Summary Firmware Supply Chain Attacks involve the compromise of firmware during its development, distribution, or update process, allowing attackers to inject malicious code that can persist undetected at a low…

Summary Hardware Supply Chain Compromise is a type of attack where adversaries infiltrate the manufacturing or distribution process of hardware components to introduce malicious modifications, backdoors, or vulnerabilities. These compromises…

Summary Malicious Code Injection in Updates is an attack where adversaries insert harmful code into legitimate software updates to compromise systems, steal data, or gain unauthorized access. This attack exploits…

Summary Malicious SDK Injection is an application attack where adversaries insert harmful code into legitimate software development kits (SDKs) to compromise applications using them. This attack exploits the trust developers…

Summary Package Repository Poisoning is a cyberattack where attackers inject malicious code into software package repositories, compromising the integrity of software distributed through these channels. This attack targets the supply…

Summary Signed Update Abuse is a type of application attack where threat actors exploit the trust in digitally signed software updates to distribute malicious code. By abusing legitimate update mechanisms…

Summary Software Supply Chain Attacks involve compromising software products or updates by targeting the development, distribution, or update processes. Attackers inject malicious code or manipulate legitimate software components to gain…

Summary Source Code Repository Compromise is a cyberattack targeting the unauthorized access or manipulation of source code stored in version control systems, leading to intellectual property theft, insertion of malicious…

Summary Third-Party Vendor Compromise is a cybersecurity attack where threat actors exploit vulnerabilities in external vendors or suppliers to gain unauthorized access to a target organization’s systems or data. This…

Summary Trusted Partner Abuse is an application attack where adversaries exploit relationships with legitimate third-party partners to gain unauthorized access or perform malicious activities within a target organization’s systems. Key…

Summary Typosquatting packages involve the creation and distribution of malicious software packages with names that closely resemble legitimate ones, exploiting user typos to trick developers into installing harmful code. This…

Summary Update Server Hijacking is a cyberattack where adversaries compromise or impersonate legitimate software update servers to distribute malicious updates, enabling unauthorized code execution or system compromise on target devices.…