The Mend.io AppSec Blog

A Malicious Package Found Stealing AWS AIM data on npm has Similarities To Capital One Hack

Maciej Mensfeld Feb 2, 2022

Malicious Packages

Discover how a malicious package found stealing AWS AIM data on npm has similarities to the Capital One hack. Learn about the threat.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - cve 2021 44142 vulnerability 2

CVE-2021-44142: Vulnerability in Samba Enables Bad Actors to Execute Arbitrary Code as Root

Tiffany Jennings Feb 1, 2022

Open Source Security

CVE-2021-44142 allows bad actors to execute arbitrary code as root on Samba. Learn about the vulnerability, exploit, and how to fix it.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - cve 2021 4034 pwnkit

CVE-2021-4034: A Walkthrough of Pwnkit — the Latest Linux Privileges Escalation Vulnerability

Tiffany Jennings Jan 27, 2022

Open Source Security

Dive into CVE-2021-4034 PwnKit vulnerability: learn how a simple out-of-bounds access in Linux's pkexec can lead to root system privileges.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - top open source licenses explained post

Open Source Licenses Trends and Predictions

Tiffany Jennings Jan 27, 2022

Open Source Licenses

Open source licenses in 2022. Permissive licenses are on the rise, while copyleft licenses like GPL are decreasing in popularity.

DevSecOps in an Agile Environment

Alfrick Opidi Jan 20, 2022

DevSecOps

Discover how DevSecOps integrates with Agile to enhance security and speed in software development. Learn best practices & more.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - chief scientists series featured

Best Practices for Dealing With Log4j

Tiffany Jennings Jan 4, 2022

Open Source Security

Learn best practices for dealing with Log4j vulnerabilities, prevent future risks by sanitizing user input, and secure your App with our tips.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j cves images 44832

CVE-2021-44832: A New Medium Severity Vulnerability Was Found in Log4j

Tiffany Jennings Dec 29, 2021

Open Source Security

Learn about CVE-2021-44832 in Log4j and how to protect your applications. Stay informed about the latest cybersecurity vulnerabilities.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j cves images renovate

Fixing the Log4j Vulnerability with Mend

Rhys Arkins Dec 27, 2021

Open Source Security

Learn how to fix the Log4j vulnerability with Mend Renovate and Remediate. Keep your applications secure with automated dependency management.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j and ruby

Log4Shell or LogThemAll: Log4Shell in Ruby Applications

Tiffany Jennings Dec 23, 2021

Open Source Security

Learn about the Log4Shell vulnerability in Ruby applications using Log4j jars in JRuby, exposing them to potential exploits.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j vulnerability cve 2021 45105 1

Log4j Vulnerability CVE-2021-45105: What You Need to Know

Tiffany Jennings Dec 19, 2021

Open Source Security

Stay informed about the latest Log4j vulnerability CVE-2021-45105 & how to protect your applications. Learn how to fix & prevent exploitation

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j vulnerability 2021 45046

Log4j Vulnerability CVE-2021-45046 Now a Critical 9.0

Shuki Avraham Dec 16, 2021

Open Source Security

What you need to know about Log4j Vulnerability CVE-2021-45046, and how to remediate it.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - log4j blog post

New Log4j Vulnerability CVE-2021-44228: Info and Remediation

Tiffany Jennings Dec 10, 2021

Open Source Security

How to remediate the newly published critical vulnerability in Apache’s widely popular Log4j Java library, CVE-2021-44228.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - ahviptcynte0jmntzd1pdgvtzwrpdg9yaw1hz2umzmlszw5hbwu9axrlbwvkaxrvcmltywdlxzviowe0ogi3mwnmmwyuanbnjnzlcnnpb249mdawmczzawc9owi1zme1nji4ztrjmwflnju2mjlkotu3ota2otrlmzc

How to Make Your Vulnerability Management Metrics Count

Tiffany Jennings Dec 9, 2021

Application Security

Learn how to make your vulnerability management metrics count. Discover key metrics to track and prioritize vulnerabilities effectively.

Vulnerability Management — What You Need To Know

Tiffany Jennings Dec 2, 2021

Application Security

Understand the four stages, metrics, policy setup, and prioritization for effective security through Vulnerability Management.

A malicious package found stealing aws aim data on npm has similarities to capital one hack - fixing vulnerable npm packages quickly and painlessly

Mend Research: Fixing Vulnerable npm Packages Quickly and Painlessly

Tiffany Jennings Nov 24, 2021

Open Source Security

Learn how Mend Research is helping developers fix vulnerable npm packages quickly and painlessly.

The Future of Vulnerability Management Programs

Tiffany Jennings Nov 4, 2021

Application Security

Discover the future of vulnerability management programs in the ever-changing digital world. Learn about detection, prioritization, & more.

Mend.io Blog

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

Filter & Search

Subscribe to our Blog

Thank you