Post #4165474

5 days ago I wrote this on X: So let’s just guess that the package manager was JFrog. If you are running JFrog keep a close eye on your network traffic. Unfortunately anything with Internet access, if compromised, can become a proxy. Like DNS servers. Not an easy problem to solve. ~~ I was right. JFrog was the third party package manager the agent escaped in the OpenAI / Hugging Face incident. Now about everything else…I hope people are starting to understand how network security is one of your most powerful security tools, not just for blocking but for identifying a breach. I wrote about that in my book and it is how I got into security. https://medium.com/cloud-security/how-network-traffic-got-me-into-cybersecurity-94796bb78c92