Supply Chain Security
Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials.
Hi, what are you looking for?
SecurityWeek
All posts tagged "supply chain attack"
Data Breaches
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
Malware & Threats
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Artificial Intelligence
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.
Supply Chain Security
Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework.
Supply Chain Security
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
Supply Chain Security
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
Malware & Threats
Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.
Data Breaches
The attackers used a compromised BigCommerce application key held by Ribon to access customer data.
Application Security
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
Supply Chain Security
It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North...
Data Breaches
The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack.
Malware & Threats
Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Supply Chain Security
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published.
Supply Chain Security
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.
Malware & Threats
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials.
Malware & Threats
A threat actor poisoned several Jscrambler NPM package versions to drop a cross-platform credential stealer.
Supply Chain Security
The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers.
Artificial Intelligence
Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.
CISO Strategy
Designed for cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn innovative risk management and defense strategies...
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Supply Chain Security
SBOM pioneer Allan Friedman joined the SecurityWeek Podcast to discuss why knowing what is inside software is only the beginning, how AI is complicating...
Artificial Intelligence
Cybersecurity Funding
Vulnerabilities
Supply Chain Security
