Supply Chain Security
CISA's SBOM champion Allan Friedman and YL Ventures’ Andy Ellis joins JupiterOne’s CISO Sounil Yu dig deeper into the U.S. government's response to supply...
Hi, what are you looking for?
SecurityWeek
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Funding/M&A
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology.
Supply Chain Security
The recent compromise of Cyberhaven’s Chrome extension appears to be part of a broad campaign that started over a year ago.
Supply Chain Security
Cyberhaven and other Chrome extensions were compromised in a supply chain attack targeting Facebook advertising users.
Supply Chain Security
Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library.
Supply Chain Security
ESET warns of a new reality: “UEFI bootkits are no longer confined to Windows systems alone.”
ICS/OT
Critical industries must prepare themselves for a new wave of ransomware attacks specifically targeting OT
Application Security
Boston, Mass.-based Tidelift, a company on a mission to address open source supply chain “health and security,” has raised $27 million in Series C...
Application Security
WhiteSource Changes Company Name to Mend
Malware & Threats
A popular Python package was compromised recently and replaced with a malicious version apparently designed to help the attacker obtain AWS credentials.
Supply Chain Security
Security researchers at SentinelLabs are calling attention to a software chain supply attack targeting Rust developers with malware aimed directly at infecting GitLab Continuous...
ICS/OT
MITRE has announced a new special interest group (SIG) whose goal is to help enhance cyber defenses for industrial control systems (ICS) and operational...
Cyberwarfare
The United States and the European Union announced on Monday a joint effort to boost microchip manufacturing and tackle Russian disinformation around the war...
Cybersecurity Funding
Palo Alto, Calif-based firm Xage has raised a $6 million top-up to the $30 million Series B funding it secured in January 2022.
CISO Strategy
We have a long way to go to get adequate cybersecurity expertise on boards, but the time has come to make it happen
Cybercrime
Agricultural equipment giant AGCO says its business operations have been impacted after falling victim to a ransomware attack last week.AGCO designs, makes, and distributes...
Government
The Treasury Department announced sanctions in connection with a massive Chinese hack of American telecommunications companies and a breach of its own computer network.
Vulnerabilities
Malware & Threats
Government
TikTok said it will have to “go dark” this weekend unless Biden assures the company it won’t enforce a shutdown after the Supreme Court...
Application Security
Data Breaches
