Supply Chain Attacks

Malware Software Vulnerabilities npm Ecosystem npm Data Breaches Threat Actors Hacking Targeted Industries NPM Ecosystem Malware Distribution

3 ARTICLES

2w ago

Klue Supply-Chain Breach Exposes Salesforce CRM Data

Attackers used a compromised legacy credential to harvest OAuth tokens that let them impersonate Klue inside customers’ Salesforce accounts, and the incident has spawned an active extortion threat and forensic probes.

5 ARTICLES

3w ago

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

10 ARTICLES

last mo.

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

3 ARTICLES

2mo ago

RansomHouse Claims Trellix Breach, Posts Screenshots

9 ARTICLES

2mo ago

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

7 ARTICLES

2mo ago

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

14 ARTICLES

2mo ago

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

4 ARTICLES

4mo ago

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

26 ARTICLES

5mo ago

Notepad++ Confirms Hosting-Level Update Hijack as Rapid7 Ties Operation to China’s Lotus Blossom

5 ARTICLES

6mo ago

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

3 ARTICLES

7mo ago

Google Details 'BadAudio' Malware Behind APT24’s Multi‑Year Espionage

4 ARTICLES

7mo ago

ESET Details 'EdgeStepper' Implant Used by China-Aligned PlushDaemon to Hijack Software Updates

9 ARTICLES

10mo ago

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

4 ARTICLES

10mo ago

PyPI Starts Daily Expired-Domain Checks, Unverifies 1,800 Emails to Block Account Takeovers

6 ARTICLES

11mo ago

Phishing Campaign Targets Mozilla and PyPI Developer Accounts

5 ARTICLES

last yr.

LottieFiles Supply Chain Attack Drains Users' Crypto Wallets

Supply Chain Attacks

Klue Supply-Chain Breach Exposes Salesforce CRM Data

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

RansomHouse Claims Trellix Breach, Posts Screenshots

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Meta Halts Work With Mercor After Breach Tied to LiteLLM Supply-Chain Attack

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

Never miss stories about

Supply Chain Attacks

Trivy Supply-Chain Hack Widens as Malicious Images Pulled and 1,000+ Victims Emerge

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

Notepad++ Confirms Hosting-Level Update Hijack as Rapid7 Ties Operation to China’s Lotus Blossom

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

Google Details 'BadAudio' Malware Behind APT24’s Multi‑Year Espionage

ESET Details 'EdgeStepper' Implant Used by China-Aligned PlushDaemon to Hijack Software Updates

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

PyPI Starts Daily Expired-Domain Checks, Unverifies 1,800 Emails to Block Account Takeovers

Phishing Campaign Targets Mozilla and PyPI Developer Accounts

LottieFiles Supply Chain Attack Drains Users' Crypto Wallets

Never miss stories about

Supply Chain Attacks