Supply Chain Security

Malware Software Vulnerabilities Incident Response Software Development Software Supply Chain Attacks Software Supply Chain Supply Chain Attacks Open Source Security Vulnerabilities Malware Distribution

3 ARTICLES

2w ago

Two-Letter Backdoor Causes Robot to Aim Knife at Model Hand

Binghamton University researchers demonstrated a Trojan-style trigger that altered an LLM-based robot planner and proposed a stepwise plan-checker to flag unsafe actions.

4 ARTICLES

2w ago

AOMEI Update Servers Briefly Hijacked to Push CROSSROAD Downloader and SHINYROAD Backdoor

3 ARTICLES

2w ago

Brevo Breach Used Cloudflare Worker to Inject Malware on More Than 100,000 Sites

5 ARTICLES

2mo ago

LiteLLM Supply‑Chain Breach May Have Exposed Thousands After 40‑Minute Malicious PyPI Window

4 ARTICLES

2mo ago

Mozilla Revokes Exposed Firefox and Thunderbird GPG Subkey and Publishes Replacement

14 ARTICLES

3mo ago

ChainDrop Worm Infects Hundreds of npm Packages

4 ARTICLES

3mo ago

Adform Tracking Script Compromised to Swap Cryptocurrency Wallets

3 ARTICLES

3mo ago

Sandworm_Mode Worm Targets AI Development Toolchains

7 ARTICLES

4mo ago

Injective SDK Npm Release Backdoored to Steal Wallet Keys

10 ARTICLES

5mo ago

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

13 ARTICLES

5mo ago

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

3 ARTICLES

6mo ago

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

3 ARTICLES

6mo ago

JDownloader Restores Site After Hack Replaced Official Installers With Malware

7 ARTICLES

6mo ago

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

14 ARTICLES

6mo ago

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

3 ARTICLES

6mo ago

OpenAI Rotates Mac Signing Certificates, Sets May 8 Update Deadline After Axios Hack

9 ARTICLES

6mo ago

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Supply Chain Security

Two-Letter Backdoor Causes Robot to Aim Knife at Model Hand

AOMEI Update Servers Briefly Hijacked to Push CROSSROAD Downloader and SHINYROAD Backdoor

Rank Math PRO Supply-Chain Compromise Delivered Self‑Restoring Backdoor

Ledger Orders Sales Halt After LTE Implants Steal Wallet Recovery Phrases

Midnight Mimosa Malware Found Preinstalled on Budget MediaTek Android Phones

Brevo Breach Used Cloudflare Worker to Inject Malware on More Than 100,000 Sites

LiteLLM Supply‑Chain Breach May Have Exposed Thousands After 40‑Minute Malicious PyPI Window

Mozilla Revokes Exposed Firefox and Thunderbird GPG Subkey and Publishes Replacement

ChainDrop Worm Infects Hundreds of npm Packages

Adform Tracking Script Compromised to Swap Cryptocurrency Wallets

Never miss stories about

Supply Chain Security

Sandworm_Mode Worm Targets AI Development Toolchains

Injective SDK Npm Release Backdoored to Steal Wallet Keys

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

JDownloader Restores Site After Hack Replaced Official Installers With Malware

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

OpenAI Rotates Mac Signing Certificates, Sets May 8 Update Deadline After Axios Hack

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Never miss stories about

Supply Chain Security