Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2023.04.03.md

A story about tampering EDRs - https://redops.at/en/blog/a-story-about-tampering-edrs

Backdooring Office Structures. Part 1: The Oldschool - https://mgeeky.tech/backdooring-office-structures-part-1-oldschool/

VS Code hack shows how supply chain attacks can extend to other software development tools - https://www.reversinglabs.com/blog/vs-code-ide-hack-how-supply-chain-attacks-can-proliferate-between-developer-ecosystems

CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research - https://github.blog/2023-03-31-codeql-zero-to-hero-part-1-the-fundamentals-of-static-analysis-for-vulnerability-research/

Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise - https://www.splunk.com/en_us/blog/security/splunk-insights-investigating-the-3cxdesktopapp-supply-chain-compromise.html

#informatyka