Skip to content
Threat Feed
Subscribe

Product

Terraform

3 briefs RSS
high threat

TraderTraitor Campaign Targeting DevOps Engineers via Weaponized Terraform Repositories

North Korean threat actor TraderTraitor is using fake job interview lures on GitHub containing weaponized Terraform lock files to deliver macOS backdoors to DevOps engineers, facilitating cloud credential theft.

Terraform TraderTraitor macos supply-chain social-engineering cloud-security devops
4t 5i
medium advisory

HashiCorp Terraform Information Disclosure and Security Bypass

A local vulnerability in HashiCorp Terraform identified as CVE-2024-7956 allows local attackers to bypass security controls and access sensitive configuration information.

Terraform
1t
medium advisory

Hashicorp Terraform: Information Disclosure Vulnerability

A vulnerability in Hashicorp Terraform allows a remote, authenticated attacker to disclose sensitive information, which could lead to the exposure of confidential data.

Terraform information-disclosure vulnerability hashicorp
1t