Friday, 24 March, 2023

Microsoft warns enterprises of new 'dependency confusion' attack technique

<p>A Microsoft white paper has detailed a new concept called &quot;dependency confusion&quot; that attacks mixed app-building environments inside enterprises. It says that if an attacker learns the names of private libraries, they could register these names on public package repositories and upload public libraries having malicious code. The attack takes place when the package manager prioritises the library hosted on the public repository.</p> <p>&nbsp;</p>