Behind the scenes of another Supply-Chain Attack

On 17th March, Wordpress Plugin BuddyBoss was compromised. Ctrl-Alt-Intel got a behind the scene look at how this was possible and who performed the malice. -> CI/CD secrets stolen via Github Actions -> SSH keys, secrets, tokens stolen -> SSH pivoting to deployment infrastructure for further credential theft -> Malicious code injected into production infrastructure ^ All of the above, done by Claude. See the analyses below: https://ctrlaltintel.com/research/BuddyBoss-1/ https://ctrlaltintel.com/