A newly identified and highly sophisticated supply chain attack has targeted the widely used DAEMON…
Tag: supply
China’s Tech Giants Pivot from Declining Smartphone Market to Robotics Amidst Global Supply Chain Shifts and AI Demand.
The global smartphone market is experiencing a significant paradigm shift, characterized by a prolonged period…
New Software Supply Chain Attack Leverages ‘Sleeper Packages’ to Target Developer Credentials and CI/CD Pipelines
A sophisticated new software supply chain attack campaign, attributed to the GitHub account "BufferZoneCorp," has…
Major Python Package "Lightning" Compromised in Sophisticated Supply Chain Attack Linked to TeamPCP and Mini Shai-Hulud Campaign
In a significant development echoing the escalating threats within the software ecosystem, the widely adopted…
North Korean Hackers Exploit AI-Assisted Code and Open-Source Supply Chains in Sophisticated Cryptocurrency Theft Campaigns
Cybersecurity researchers have uncovered a series of advanced cyber campaigns orchestrated by North Korean state-sponsored…
SAP-Related npm Packages Compromised in Sophisticated "mini Shai-Hulud" Supply Chain Attack
Cybersecurity researchers are sounding a critical alarm following the discovery of a sophisticated supply chain…
Checkmarx Supply Chain Incident Escalates as Cybercriminal Group Publishes Data on Dark Web
The Israeli application security firm, Checkmarx, has officially confirmed a significant escalation in its ongoing…
The Bitwarden CLI Compromise: A Deep Dive into the "Shai-Hulud" Supply Chain Attack
The command-line interface (CLI) for the popular open-source password manager Bitwarden, specifically the package @bitwarden/cli,…
New Self-Propagating Worm ‘CanisterSprawl’ Exploits Stolen npm Tokens, Escalating Open-Source Supply Chain Risks
Cybersecurity researchers have issued urgent warnings regarding a new wave of compromised software packages leveraged…
A Major Software Supply Chain Breach Affects Checkmarx KICS Docker Hub and VS Code Extensions, Exposing Sensitive IaC Data.
Cybersecurity researchers have issued a grave warning regarding a sophisticated software supply chain attack targeting…
