Tag: Dependency Confusion attack

PyTorch dependency poisoned with malicious code

Posted on

An unknown attacker used the PyPI code repository to get developers to download a compromised PyTorch dependency that included malicious code designed to steal system data. Developers who last week downloaded the nightly builds of the open source PyTorch framework Read More …

Microsoft warns enterprises of new ‘dependency confusion’ attack technique

Posted on

Microsoft has published a white paper on Tuesday about a new type of attack technique called a “dependency confusion” or a “substitution attack” that can be used to poison the app-building process inside corporate environments. The technique revolves around concepts Read More …