1-Click to Infiltrate Your Organization via Vulnerable VS Code Extensions
Ekoparty Security Conference via YouTube
Google AI Professional Certificate - Learn AI Skills That Get You Hired
AI Engineer - Learn how to integrate AI into software applications
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a conference talk from Ekoparty 2021 that delves into the emerging threat of vulnerable VS Code extensions as a means for attackers to compromise organizations through developers. Learn how popular VS Code extensions can be exploited to carry out supply chain attacks, shifting the focus from traditional attack vectors like malicious third-party packages, leaked credentials, and unpatched vulnerabilities. Gain insights from security researchers Raul Onitza-Klugman and Kirill Efimov as they discuss their findings and demonstrate the potential risks associated with IDE vulnerabilities. Discover the importance of securing development environments and staying vigilant against evolving cyber threats in this 32-minute presentation from the Ekoparty Security Conference main track.
Syllabus
1-click to infiltrate your organization via vulnerable VS Code extensions â–ª Ekoparty 2021
Taught by
Ekoparty Security Conference