Episode 322 - Megalodon, Staged Package Publishing, AI Powered Honeypots

In episode 322, the co-hosts examine critical vulnerabilities, changing security standards, and adaptive defense mechanisms. They deep dive into the recent "Megalodon" breach, identifying it as a direct poisoned pipeline execution attack. Rather than exposing a flaw inside GitHub itself , researchers at Hudson Rock traced the root cause to credentials stolen from developer desktops via infostealer…

Read the original on absolute-appsec-eps.s3.us-west-1.amazonaws.com ↗