Large enterprises scramble after supply-chain attack spills their secrets
Open source software used by more than 23,000 organizations, some of them in large enterprises, was compromised with ...
InfoWorld4d
Developers: apply these 10 mitigations first to prevent supply chain attacks
Current cybersecurity development risk frameworks don’t cover all of the tactics hackers used to compromise SolarWinds, log4j ...
The Hacker News1d
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More
Stay informed with the latest in cybersecurity trends, vulnerabilities, and best practices. Don't miss out on this week's ...
The Hacker News1d
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets Exposed
CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking credentials.
Cyber Defense Magazine2d
How Businesses Can Turn the Expanding Attack Surface into an Opportunity
Only 42% of companies discover breaches through their own security teams. CISOs are often “blind” to third-party security ...
The Register on MSN5d
Too many software supply chain defense bibles? Boffins distill advice
How to avoid another SolarWinds, Log4j, and XZ Utils situation Organizations concerned about software supply chain attacks ...
Supply chain attack on popular GitHub Action exposes CI/CD secrets
A supply chain attack on the widely used 'tj-actions/changed-files' GitHub Action, used by 23,000 repositories, potentially ...
Security Boulevard4d
Securing Your Supply Chain from Phishing Attacks
In this piece, Tass Kalfoglou, the director of our APAC Business Unit, sheds light on supply chain vulnerabilities and the ...
GitHub Action supply chain attack exposed secrets in 218 repos
The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...
How phishing attacks are hitting the supply chain – and how to fight back
The global supply chain is the backbone of the world’s economy. From suppliers and manufacturers to transporters, retailers, ...
Lineaje Fuels Expansion with Key Executive Hires
Lineaje, the full-lifecycle software supply chain security company, today announced the appointments of Intekhab Nazeer as ...
Coinbase Evades Major Supply Chain Attack on Blockchain AI Toolkit
The report originated from Unit 42, the threat intelligence division of Palo Alto Networks, which identified that the attacker had specifically targeted ‘agentkit’, an open-source toolkit managed by ...