У нас вы можете посмотреть бесплатно Everything to know about the tj-actions attacks или скачать в максимальном доступном качестве, видео которое было загружено на ютуб. Для загрузки выберите вариант из формы ниже:
Если кнопки скачивания не
загрузились
НАЖМИТЕ ЗДЕСЬ или обновите страницу
Если возникают проблемы со скачиванием видео, пожалуйста напишите в поддержку по адресу внизу
страницы.
Спасибо за использование сервиса ClipSaver.ru
Analyzing the TJ Actions Supply Chain Attack and How to Defend Against It In this video, we talk about the recent and highly dangerous supply chain attack involving TJ Actions. We'll explore how this attack unfolded, its significant implications, and the critical lessons learned. Key topics include the attack's exploitation of GitHub automation, the broader impact on interconnected systems, the challenges in securing open-source projects, and detailed recommendations on how to protect your repositories. We'll also discuss crucial preventive measures such as pinning GitHub actions, using signed commits, monitoring privileged access tokens, and runtime monitoring. Stay informed and learn how to better safeguard your projects against similar threats. Excalidraw: https://link.excalidraw.com/l/6qFzFKI... Blog: https://pulse.latio.tech/p/understand... Log Checker: https://github.com/latiotech/github-a... Note: This video wasn't sponsored at all, I just wanted to highlight some vendors who help with some of the pieces of detection. 00:00 Introduction to a Dangerous Supply Chain Attack 00:41 Overview of the Attack 01:23 Detailed Breakdown of the Exploit 02:33 Impact on TJ Actions and Broader Ecosystem 03:04 Exfiltration of Secrets 04:17 Targeting Coinbase 05:49 GitHub's Role and Security Flaws 06:20 Detecting and Preventing Future Attacks 06:38 Pinning GitHub Actions 08:43 Signed Commits and Identity Verification 11:18 Access Tokens and Monitoring 14:33 Runtime Monitoring and Final Thoughts 19:16 Conclusion and Recommendations