Cyber CrimeTeamPCP arrests expose supply chain risk
Alleged masterminds of TeamPCP, tied to Shai-Hulud worm, arrested in Perth with FBI help.
> Search
30 results for “supply chain”
Cyber Crime
SecurityGrid Order Targets Foreign Backdoors
Executive Order 14420 bars risky foreign grid gear, empowering DOE to vet or remove equipment.
SecurityTrojan npm Packages Drop AI-Powered Linux Backdoor
Researchers uncover 14 malicious npm packages delivering RedC2 4.0, an AI-assisted Linux backdoor, via stealthy loader.
Cyber CrimeRust Supply Chain Attack Tied to North Korea
Wiz links a crates.io compromise to Sapphire Sleet, warning of broad developer exposure.
SecurityJFrog Flaws Open Route to Package Cache Poisoning
Two flaws in JFrog Artifactory could let low-privileged users tamper with package metadata and compromise software supply chains.
SecurityRubyGems Poisoned: Supply Chain Risk Beyond Typos
OpenSourceMalware finds 16 typosquatted RubyGems, but the real risk is package name reuse and unvalidated author fields.
Cyber CrimePokémon Center UK Breach Hits Orders
Pokémon Center UK cancels orders after logistics partner CEVA suffers cyberattack, exposing customer data.
SecurityAI Labs Compete Over Rogue Agent Claims
Anthropic and OpenAI trade narratives of accidental sandbox escapes, raising questions about the safety of their frontier models.
SecurityScottish prosecutors' staff data at risk in supplier breach
Scotland's prosecution service warns 300 staff their personal data may be exposed in a cyberattack on a third-party supplier.
Tech NewsFusion fuel factory rises in Tennessee
Kyoto Fusioneering lands U.S. grants to build a fuel breeding device at Oak Ridge.
SecurityMalware Uses Ethereum Wallet as C2 Dead Drop
Sonatype finds six npm packages reading C2 addresses from an Ethereum wallet transaction linked to DPRK.
Cyber CrimeCeva Breach Reverberates Through Client Ecosystem
A Ceva Logistics data breach affecting European clients shows how supply chain attacks ripple outward.
SecuritySupply chain compromise uses poisoned API, no files changed
Attackers planted rogue admins and webshells on WordPress sites via a poisoned data feed, not file changes.
SecuritySupply Chain Risks in AI Development
New campaigns targeting Python packages highlight the growing vulnerability of AI infrastructure and developer environments.
SecurityBeyond Compliance: Rethinking Cyber Risk
Expert Edna Conway argues that true digital resilience requires moving past checkbox compliance to address complex supply chain risks.
Cyber CrimeNullReceiver Uses Blockchain for Stealth
New npm malware hides command-and-control infrastructure within zero-value Ethereum transfer addresses to bypass traditional detection.
Cyber CrimeOpen VSX Marketplace Faced 77 Impostors
A malicious campaign on the Open VSX marketplace deployed 77 counterfeit extensions to harvest developer metadata.
SecurityAI Coding Agents Face Hallucination Risks
Researchers identify a recurring security flaw where AI agents blindly execute commands based on predictable, hallucinated names.
SecurityAI Hallucinations Spur Package Risks
Researchers find top AI models consistently inventing identical, non-existent library names that attackers could potentially weaponize.
SecurityStadler Rail Defies $12.3M Ransom
The Swiss train manufacturer confirms it rejected a multi-million dollar extortion attempt following a third-party data breach.
SecurityAI Agents Vulnerable to AgentBaiting
A campaign dubbed FakeGit uses 7,600 fake GitHub repositories to trick AI agents into installing the SmartLoader malware family.
SecurityEY Security Breach Exposes Tax Documents
A compromised third-party support platform has led to the exposure of client tax files at professional services giant Ernst & Young.
SecurityVite Ecosystem Faces Blockchain-Led RAT
A new campaign targeting Vite developers uses a four-tier blockchain infrastructure to bypass traditional security takedown efforts.
Tech NewsMemory Shortages Disrupt India's Market
Skyrocketing memory costs for AI infrastructure are forcing handset price hikes and stifling shipment volumes in the Indian market.
Cyber CrimeDigiCert Breach Highlights Trust Gap
A Chinese sub-group's infiltration of DigiCert reveals how stolen code-signing certificates are weaponized against the industry.
Cyber CrimeJob Search Lures Hide Stealthy Malware
North Korean threat actors are using fake coding tests and steganography to compromise developer systems and steal sensitive data.
Cyber CrimeRisk Ledger Secures $32M for Supply Chain
London-based Risk Ledger plans to expand its network-first security platform into the US following a successful Series B raise.
SecurityFrozen Supply Chains Under Cyber Siege
A major cyberattack on Japanese food giant Nichirei exposes the fragility of global cold storage and automated shipping networks.
SecuritySupply Chain Breach Targets npm Ecosystem
Compromised AsyncAPI and Jscrambler packages expose developers to credential theft via automated malicious injection.
Cyber CrimeRansomware Halt: Fairlife Output Stalled
A cyberattack targeting Fairlife has forced an immediate, temporary suspension of production for the Coca-Cola dairy subsidiary.