Hacks That Weaponize The Software Supply Chain Are Becoming More Common

The PHP project recently announced that attackers were able to gain access to its main Git server and uploaded two malicious commits, including a backdoor. Luckily, these breaches were discovered before they went into production. The commits were pushed to the php-src repository, giving attackers a supply-chain opportunity to infect websites.  The websites would pick […]