Analysissupply chainchrome extensionsphishingpermissions model
Attackers Optimize Classic Vectors At New Scale
|
8.1
Moshe Siman Tov Bustan of OX warns in 2025 that attackers are optimizing longstanding tactics—supply chain compromises, phishing, and malicious browser extensions—rather than inventing novel vectors. He cites the Shai Hulud NPM and XZ Utils incidents, notes packages with tens of millions of downloads were poisoned, and urges fixes to permissions models, supply-chain verification, and phishing-resistant authentication.
Scoring Rationale
Strong industry-wide relevance and actionable mitigations, limited by single-source contributed analysis rather than broad empirical study.
Practice interview problems based on real data
1,500+ SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
