Security News > 2021 > May > Rapid7 Source Code Exposed in Codecov Supply Chain Attack
Rapid7 says unauthorized third-party accessed source code, customer data during Codecov supply chain breach.
Enterprise security vendor Rapid7 says it was among the victims of the Codecov software supply chain attack and warned Thursday that data for a subset of its customers was accessed in the breach.
Rapid7, widely known for its tools that automate security assessments, said an internal investigation found that "a small subset of our source code repositories for internal tooling for our MDR service was accessed by an unauthorized party outside of Rapid7."
The supply chain hack on Codecov happened in mid-January and was discovered in the wild by a Codecov customer on the morning of April 1, 2021 when the company said it learned that someone had gained unauthorized access to the Bash Uploader script and modified it without permission, leading to exposed sensitive secrets like tokens, keys and credentials from organizations around the world.
A small subset of our source code repositories for internal tooling for our MDR service was accessed by an unauthorized party outside of Rapid7.
The massive blast radius from the Codecov supply chain attack remains shrouded in mystery as security teams continue to assess the fallout from the breach but victims continue to publicly acknowledge possible exposure of sensitive developer secrets.
News URL
Related news
- Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers (source)
- China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access (source)
- GitHub supply chain attack spills secrets from 23,000 projects (source)
- Supply chain attack on popular GitHub Action exposes CI/CD secrets (source)
- Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos (source)
- GitHub Action hack likely led to another in cascading supply chain attack (source)
- GitHub Action supply chain attack exposed secrets in 218 repos (source)
- Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed (source)
- ⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)