As cited
Copy frozen at (site build).
threat intel
Risky Bulletin: Plone CMS stops supply-chain attack
Plone, a Python-based content management system, detected malicious code injected into five of its repositories by a threat actor who compromised a developer account. The contaminated code was identified and removed before reaching any official release.
Why it matters: Organizations using Plone or considering it need to verify their current deployments were not affected by checking release dates against the incident timeline, and developers should review their own account security practices given the developer account compromise vector.
- Source published
- First seen by Cybersecurity Tracker