Stay informed with the latest in cybersecurity trends, vulnerabilities, and best practices. Don't miss out on this week's ...

A potential supply chain attack on GitHub CodeQL started simply: a publicly exposed secret, valid for 1.022 seconds at a time. In that second, an attacker could take a series of steps that would allow ...

CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking credentials.

Drawing lessons from the trials of 2025, some of the maturing methodologies behind those very considerable software supply ...

Recently, Coinbase, the largest cryptocurrency exchange in the United States, successfully navigated a potential supply chain attack targeting its open-source infrastructure. This article will delve ...

"Nation-state hacking has become more in your face," says Cleveland – who now works for network intel infosec outfit ExtraHop ...

Threat actors are continuously evolving their tactics to exploit vulnerabilities and gain unauthorized access. That increasingly involves attacks targeting the software supply chain. The post The ...

The report originated from Unit 42, the threat intelligence division of Palo Alto Networks, which identified that the attacker had specifically targeted ‘agentkit’, an open-source toolkit managed by ...

Researchers claim primary target of a recent cascading supply chain attack was Coinbase The cryptocurrency exchange was not ...

Abracadabra hack, updates on Tornado Cash and Bybit, $7M scam money recovery, man faces prison for stabbing crypto CEO, movie ...

Ten npm packages were suddenly updated with malicious code yesterday to steal environment variables and other sensitive data ...