Supply Chain Security
PowerShell and .NET variants of the malware abuse AirWatch’s MDM API to establish a C&C communication channel.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Supply Chain"
Cybersecurity Funding
Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions.
Malware & Threats
The malware uses invisible Unicode characters to hide its code and blockchain-based infrastructure to prevent takedowns.
Application Security
GitHub will implement local publishing with mandatory 2FA, granular tokens that expire after seven days, and trusted publishing.
Application Security
The packages were injected with malicious code to harvest secrets, dump them to a public repository, and make private repositories public.
Application Security
Designed to intercept cryptocurrency transactions, the malicious code reached 10% of cloud environments.
Supply Chain Security
The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack.
Supply Chain Security
With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for...
Supply Chain Security
Hackers have injected malware into popular NPM packages after compromising several developer accounts in a fresh phishing campaign.
Application Security
RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.
Vulnerabilities
Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects.
Malware & Threats
A threat actor published backdoored versions of 17 NPM packages from GlueStack in a fresh supply chain attack.
Nation-State
The China-linked hacking group Earth Ammit has launched multi-wave attacks in Taiwan and South Korea to disrupt the drone sector.
Malware & Threats
Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor.
Application Security
Software and AI supply chain transparency firm Manifest has raised $15 million in a Series A funding round led by Ensemble VC.
Funding/M&A
The cash infusion brings Chainguard’s total funding to about $612 million since launching in 2021 and prices the company at $3.5 billion.
Supply Chain Security
Researchers uncover new software supply chain threat from LLM-generated package hallucinations.
Application Security
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Malware & Threats
The websites of over 100 auto dealerships were found serving malicious ClickFix code in a supply chain compromise.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Artificial Intelligence
Vulnerabilities
Artificial Intelligence
A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.
Cybersecurity Funding
