Hackers vs. Devs - Attacking Dev Tools and Infrastructure
summary
Attackers focus on developer infrastructure rather than custom code, with one firm seeing only three custom‑code incidents in 4.5 years while ~50% of breaches start from compromised accounts and IBM reporting 12% stem from software supply chain attacks. Examples include an actively exploited GitLab password bug, CircleCI and marketplace OAuth compromises that leak secrets into S3 affecting customers, a near‑nation‑state XZ Utils implant caught by a performance bug, and automated scanners like TruffleHog and techniques such as MFA push fatigue and fake dependabot used to harvest tokens.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 3:56Why attackers target dev infra
- 7:29Compromising dev accounts
- 15:45Breaches via dev tools
- 19:21Supply chain attacks
- 26:21Marketplace risks
- 32:21Prevention for dev tools
- 37:18Reducing dev exposure
- 41:16Q&A
related talks
48mHacking the software supply chain one developer at a time
46mHow to hack a node app?
13mKeynote: Hacking the OSS Supply Chain
22mDevSecOps - The Story of 3 Security Breaches
21mSecurity That Enables: Breaking Down Security Silos in the DevOps Ecosystem
33mIn the Trenches During a Software Supply Chain Attack
32mBuilding a secure future using DEVSECOPS practices and technologies
35mBreaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws