Yehuda Gelb – Medium

Yehuda Gelb

Yehuda Gelb
in
Checkmarx Zero

A New North Korean Group Emerges, Disrupting the Open Source Ecosystem

In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the…

5 min read1 day ago

--

A New North Korean Group Emerges, Disrupting the Open Source Ecosystem

--

Yehuda Gelb
in
Checkmarx Zero

Instant Breach: Malicious Package Compromise — Victim vs Attacker’s POV

Open-source packages are an indispensable tool for developers. However, the convenience they offer comes with a significant risk: the…

2 min readMay 9, 2024

--

Instant Breach: Malicious Package Compromise — Victim vs Attacker’s POV

--

Yehuda Gelb
in
Checkmarx Zero

New Technique to Trick Developers Detected in an Open-Source Supply Chain Attack.

In a recent attack campaign, cybercriminals were discovered cleverly manipulating GitHub’s search functionality, and using meticulously…

7 min readApr 10, 2024

--

New Technique to Trick Developers Detected in an Open-Source Supply Chain Attack.

--

Yehuda Gelb
in
Checkmarx Zero

March 2024 in Software Supply Chain Security

In March 2024, the software supply chain faced unprecedented threats, including one of the most advanced supply chain attacks known to…

3 min readApr 3, 2024

--

March 2024 in Software Supply Chain Security

--

Yehuda Gelb
in
Checkmarx Zero

PyPi Is Under Attack: Project Creation and User Registration Suspended — Here’s the details

A few hours ago, The Python Package Index (PyPi) suspended new project creation and new user registration to mitigate an ongoing malware…

3 min readMar 28, 2024

--

PyPi Is Under Attack: Project Creation and User Registration Suspended — Here’s the details

--

Yehuda Gelb
in
Checkmarx Zero

GitHub Repos used for Distributing Malware

Key Points:

3 min readMar 4, 2024

--

GitHub Repos used for Distributing Malware

--

Yehuda Gelb
in
Checkmarx Zero

Tornado Cash Theft Uncovered: Stealthy Attack Quietly Drains Funds from Decentralized Finance…

Key Points

4 min readFeb 26, 2024

--

Tornado Cash Theft Uncovered: Stealthy Attack Quietly Drains Funds from Decentralized Finance…

--

Yehuda Gelb
in
Checkmarx Zero

January 2024 in Software Supply Chain Security

As we enter 2024, the cybersecurity landscape continues to be a battleground for advanced threats, particularly in software supply chains…

3 min readFeb 15, 2024

--

January 2024 in Software Supply Chain Security

--

Yehuda Gelb
in
Checkmarx Zero

The Hidden Dangers of Abandoned Digital Assets in Open-Source Ecosystems

The digital ocean on which many of us including the world’s largest corporations rely on, is filled with hidden dangers, particularly in…

6 min readFeb 8, 2024

--

The Hidden Dangers of Abandoned Digital Assets in Open-Source Ecosystems

--

Yehuda Gelb
in
Checkmarx Zero

December 2023 in Software Supply Chain Security

As 2023 comes to a close, software supply chain attacks are far from it. This December witnessed an intensified wave of cyber threats, with…

3 min readJan 7, 2024

--

December 2023 in Software Supply Chain Security

--

Yehuda Gelb

Yehuda Gelb

Yehuda is a security researcher at Checkmarx and has a passion for making cyberspace a safer place to live and work.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams