Online collaboration apps have become critical for business, yet many organisations haven’t corrected the security errors they made when rushing to implement these tools at the start of the pandemic.
Software supply chain security vendor claims to have discovered that true, non-agent-based runtime vulnerability analysis is possible by harnessing cloud APIs.
The threat actors are distributing their malware via the Play Store, and already had over 30,000 installations as of March.
AquaSec analysed a sample of 1.25 million GitHub repositories and found that about 37,000 of them are vulnerable to RepoJacking, including companies such as Google and Lyft.
Experts say that cybersecurity skills and a whole-of-organisation approach can go a long way to tackling misinformation threats.
