Application Security
RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Supply Chain"
Vulnerabilities
Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects.
Malware & Threats
A threat actor published backdoored versions of 17 NPM packages from GlueStack in a fresh supply chain attack.
Nation-State
The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector.
Malware & Threats
Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor.
Application Security
Software and AI supply chain transparency firm Manifest has raised $15 million in a Series A funding round led by Ensemble VC.
Funding/M&A
The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.
Supply Chain Security
Researchers uncover new software supply chain threat from LLM-generated package hallucinations.
Application Security
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Malware & Threats
The websites of over 100 auto dealerships were found serving malicious ClickFix code in a supply chain compromise.
Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Supply Chain Security
Report from the Department for Science, Innovation & Technology (DSIT) finds weaknesses in current practices.
Malware & Threats
Silk Typhoon APT caught using IT supply chain entry points to conduct reconnaissance, siphon data, and move laterally on victim networks.
Supply Chain Security
Join Us in Shaping the Future of Supply Chain Security - Don’t miss this chance to be part of the conversation addressing one of...
Malware & Threats
North Korea-linked Lazarus Group is targeting freelance software developers to compromise the supply chain.
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Funding/M&A
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology.
Supply Chain Security
The recent compromise of Cyberhaven’s Chrome extension appears to be part of a broad campaign that started over a year ago.
Supply Chain Security
Cyberhaven and other Chrome extensions were compromised in a supply chain attack targeting Facebook advertising users.
Mobile & Wireless
Mobile & Wireless
Artificial Intelligence
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Cybersecurity Funding
Artificial Intelligence
Vulnerabilities
Privacy & Compliance