Application Security
Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Supply Chain"
Cybersecurity Funding
The British firm has built a collaborative platform to help organizations address supply chain security risks.
Supply Chain Security
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
Cybersecurity Funding
The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion.
Supply Chain Security
New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is largely lacking.
Supply Chain Security
Rather than scanning code alone, Build Application Firewalls inspect runtime behavior inside the software build pipeline.
Artificial Intelligence
“TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises.
Artificial Intelligence
Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue.
Supply Chain Security
Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable security decisions.
Malware & Threats
The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.
Cybersecurity Funding
The company will use the latest capital to scale its go-to-market efforts and expand its platform’s capabilities.
Malware & Threats
Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers.
Supply Chain Security
The protections against NPM supply chain attacks could be bypassed, leading to arbitrary code execution.
Application Security
The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.
Supply Chain Security
From open source libraries to AI-powered coding assistants, speed-driven development is introducing new third-party risks that threat actors are increasingly exploiting.
Malware & Threats
Notepad++ found a vulnerability in the way the software updater authenticates update files.
Supply Chain Security
The new self-replicating worm iteration has destructive capabilities, erasing home directory contents if it cannot spread to more repositories.
Malware & Threats
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
Supply Chain Security
PowerShell and .NET variants of the malware abuse AirWatch’s MDM API to establish a C&C communication channel.
Cybersecurity Funding
Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions.
Artificial Intelligence
The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase.
Artificial Intelligence
Identity & Access
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
