Ransomwarecritical
Week in review: PHP supply chain attack, common zero trust traps, hardening CI/CD pipelines
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-21975 | SSRF in VMware vRealize Operations Manager API Enables Admin Credential Theft | 7.5 | 78% | KEVRansomwarePoC | KEV |
| CVE-2021-21983 | Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network… | 6.5 | 69% | PoC |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news and articles: The PHP development team has averted an attempted supply chain compromise that could have opened a backdoor into many web servers. By hardening CI/CD pipelines and addressing security early in the development process, developers can deliver software faster and more securely.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.