What Aqua discovered was twofold: millions of such repositories — including those belonging to companies such as Google and Lyft — are present on GitHub; and tools are easily available to attackers to find these repos and hijack them.
“When a repository owner changes their username, a link is created between the old name and the new name for anyone who downloads dependencies from the old repository,” researchers Ilay Goldman and Yakir Kadkoda said. “However, it is possible for anyone to create the old username and break this link.”
Aqua Security, the pioneer in cloud native security, has announced the results of a new study which reveals that, whilst UK firms are realising the benefits of cloud native security, the software supply chain has become a top security concern for them.
LONDON – June 14, 2023 – Aqua Security, the pioneer in cloud native security, has announced the results of a new study which reveals that, whilst UK firms are realising the benefits of cloud native security, the software supply chain has become a top security concern for them. The survey was conducted at Cloud Expo …
BOSTON, MA — June 13, 2023 — Aqua Security, the pioneer in cloud native security, today announced it has won a multi-million-dollar contract with the U.S. Army to provide cloud native application protection platform (CNAPP) security. Under this contract, Aqua Security will provide technology and services that will enable the Army to expand their cloud, …
Aqua’s integration with the Security Lake utilises the open cybersecurity schema framework (OCSF), which allows security teams to collect data from various sources and correlate it with their sources to get an enhanced security evaluation and reduce the time to detect issues and resolve them.
Powered by eBPF technology, Aqua’s pipeline integrity scanner detects and blocks suspicious behaviour and malware in real time, preventing code tampering and countering threats in the software build process.
BOSTON — May 30, 2023 — Aqua Security, the pioneer in cloud native security, today announced support for Amazon Security Lake from Amazon Web Services (AWS), which is now generally available. The integration delivers the industry’s most comprehensive cloud native security data to Amazon Security Lake to help security teams accurately determine their risk posture …