23965 shaares
66 results
tagged
supplychain
Code-signing is supposed to make people safer. In this case, it made them less so.
PyPI module 'ctx' that gets downloaded over 20,000 times a week has been compromised in a software supply chain attack with malicious versions stealing the developer's environment variables. Additionally, versions of a 'phpass' fork published to the PHP/Composer package repository Packagist had been altered to steal secrets.
According to a new report from BlueVoyant, 97% of firms have been negatively impacted by a supply chain cybersecurity breach.
A U.S. Securities and Exchange Commission investigation into the SolarWinds Russian hacking operation has dozens of corporate executives fearful information unearthed in the expanding probe will expose them to liability, according to six people familiar with the inquiry.
Interested in a detailed-but-accessible case study of the Russian cyberespionage campaign that targeted SolarWinds (among others)? I’ve got you covered.
ENISA feels the term software supply chain attack is overused, so what does constitute a supply chain attack?
If you’re not already paying attention to the Kaseya ransomware incident, you should be.
Kaseya VSA is a commonly used solution by MSPs — Managed Service Providers — in the United States and United Kingdom, which helps them…
From NotPetya to SolarWinds, it’s a problem that’s not going away any time soon.
Fake developer tool inserts malware into the compiled binary, unbeknownst to the developer.
Third time lucky! (The first two times were lucky, too, luckily.)
Embarrassed overreaction or righteous indignation? An academic research group has provoked the Linux crew to ban their whole university!
A recent court case against Disney, Viacom, Comcast and others indicates software kit developers should tighten security and data privacy practices.
The word ‘unprecedented’ has been used a lot over the past year, and with good reason given the huge impact of COVID-19 on societies and businesses around
Researcher who got targets to automatically install his code gets $130,000 payout.