#supply-chain-attacks
#supply-chain-attacks

3 days ago

Information security

TeamPCP Moves From OSS to AWS Environments

1 week ago

Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

The internet remains vulnerable, with supply chain attacks and new malware techniques posing significant threats to security.

fromTechzine Global

8 months ago

Software development

Open-source malware surges 188 percent, targeting developers

New Research: Multi-Stage Malware Attack on Python Package Index Discovered

A malicious package on PyPI harvests sensitive developer data, highlighting the risk of supply chain attacks.

Why Are Cyberattacks Targeting Retail? Experts Share Their Thoughts

Retailers, even luxury brands, are increasingly targeted by cyberattacks, highlighting vulnerabilities in their security practices.

fromTechCrunch

3 days ago

Hacker hijacks Axios open-source project, used by millions, to push malware | TechCrunch

A hacker compromised the Axios library to deliver malware, risking millions of developers' systems.

3 days ago

TeamPCP Moves From OSS to AWS Environments

TeamPCP has exploited compromised credentials to target open source software, leading to significant data exfiltration and supply chain attacks.

1 week ago

Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

The internet remains vulnerable, with supply chain attacks and new malware techniques posing significant threats to security.

fromTechzine Global

8 months ago

Software development

Open-source malware surges 188 percent, targeting developers

Information security

New Research: Multi-Stage Malware Attack on Python Package Index Discovered

Information security

Why Are Cyberattacks Targeting Retail? Experts Share Their Thoughts

Shadow AI Risk: How SaaS Apps Are Quietly Enabling Massive Breaches

All analyzed companies operate AI-enabled SaaS environments, with organizations averaging 140 such applications, creating cascading breach risks across interconnected systems.

fromBleepingComputer

2 weeks ago

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

GlassWorm supply-chain campaign compromised 433 components across GitHub, npm, and VSCode/OpenVSX, using a single Solana blockchain address for command-and-control across coordinated attacks targeting cryptocurrency wallets and developer credentials.

fromArs Technica

3 weeks ago

Supply-chain attack using invisible code hits GitHub and other repositories

Hackers use invisible Unicode characters to hide malicious code that appears as whitespace to humans but executes normally in JavaScript and AI systems.

Node JS

fromDevOps.com

Malicious NPM Package Gets Downloaded 50K Times Before Discovery - DevOps.com

A malicious npm package downloaded 50,000 times used naming deception and preinstall script hooks to evade detection and compromise Windows, Linux, and macOS systems.

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware

A coordinated campaign uses fake Next.js repositories and job assessment lures to trick developers into executing malicious code that establishes persistent command-and-control access.

Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware

This week's recap shows how small gaps are turning into big entry points. Not always through new exploits, often through tools, add-ons, cloud setups, or workflows that people already trust and rarely question. Another signal: attackers are mixing old and new methods. Legacy botnet tactics, modern cloud abuse, AI assistance, and supply-chain exposure are being used side by side, whichever path gives the easiest foothold.

Tech industry

#ransomware

fromTechRepublic

Information security

Ransomware Groups Claimed 2,000 Attacks in Just Three Months

fromIT Pro

Information security

Ransomware attacks are hitting European enterprises at record pace

fromTechRepublic

Information security

Ransomware Groups Claimed 2,000 Attacks in Just Three Months

fromIT Pro

Information security

Ransomware attacks are hitting European enterprises at record pace

Node JS

npm's Update to Harden Their Supply Chain, and Points to Consider

Node JS

GitHub Boosting Security in Response to NPM Supply Chain Attacks

Node JS

npm's Update to Harden Their Supply Chain, and Points to Consider

Node JS

GitHub Boosting Security in Response to NPM Supply Chain Attacks

Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

North Korea-linked Lazarus Group used fake recruitment campaigns to distribute malicious npm and PyPI packages embedded via dependencies in coding-assessment repositories.

Supply chain breaches fuel cybercrime cycle, report says

Cybercriminals are industrializing supply chain attacks into a self-reinforcing ecosystem combining package compromise, credential theft, identity attacks, and ransomware.

fromwww.theguardian.com

State-sponsored hackers targeting defence sector employees, Google says

The report catalogues a relentless barrage of cyber operations, most by state-sponsored groups, against EU and US industrial supply chains. It suggests the range of targets for these hackers has grown to encompass the broader industrial base of the US and Europe from German aerospace firms to UK carmakers. State-linked hackers have long targeted the global defence industry, but Luke McNamara, an analyst for Google's threat intelligence group, said they had seen more personalised and direct to individual targeting of employees.

Information security

#ai-security

Information security

Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

3 months ago

Information security

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

Information security

Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

3 months ago

Information security

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

more#ai-security

Miscellaneous

fromwww.theguardian.com

2 months ago

This is business as usual': boss of bombed Ukrainian vodka maker seeks to expand exports

Ukrainian businesses, exemplified by Nemiroff vodka, sustain and expand exports despite war-related attacks, driving sales growth in Western markets.

React

fromblog.logrocket.com

3 months ago

How to build agentic AI when your data can't leave the network - LogRocket Blog

AI advancements, supply chain attacks, and framework breakthroughs reshaped frontend development in 2025 alongside practical guidance for React Native styling, UI libraries, and TypeScript typing.

fromComputerWeekly.com

What lies in store for the security world in 2026? | Computer Weekly

Budget cuts and reduced cybersecurity staffing have degraded defenses, causing longer dwell times, slower detection, and greater exposure to supply‑chain and zero‑day attacks in 2026.

Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

Fortinet has warned that a new security flaw in FortiWeb has been exploited in the wild. The medium-severity vulnerability, tracked as CVE-2025-58034, carries a CVSS score of 6.7 out of a maximum of 10.0. It has been addressed in version 8.0.2. "An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands," the company said.

Information security

5 months ago

Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months

China-linked Jewelbug conducted a five-month intrusion into a Russian IT service provider, accessing code repositories and exfiltrating data to Yandex Cloud.

5 months ago

Devs of VS Code extensions are leaking secrets en masse

VS Code extensions frequently expose sensitive secrets, enabling potential large-scale supply chain attacks.

Socket will block it with free malicious package firewall

Socket released Socket Firewall Free, a free CLI that blocks malicious dependencies at install time across npm, yarn, pnpm, pip, uv, and cargo.

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Cursor's default-disabled Workspace Trust allows VS Code-style autorun tasks to execute on folder open, enabling arbitrary code execution and potential credential theft.

7 months ago

Stolen OAuth tokens expose Palo Alto customer data

Marc Benoit, chief information security officer at PAN, confirmed in a note to clients - seen by The Register - that it was informed on August 25 that the "compromise of a third-party application, Salesloft's Drift, resulted in the access and exfiltration of data stored in our Salesforce environment." It immediately disconnected the third-party application from its Salesforce CRM, he said.

Information security

7 months ago

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

These changes improve PyPI's overall account security posture, making it harder for attackers to exploit expired domain names to gain unauthorized access to accounts.

Python

fromIT Pro