---
id: 2751
title: "Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/security-highlights-new-cwe-rankings-software-supply-chains-and-side-channel-attacks"
published_at: "2022-07-05T17:00:00Z"
tags: ["supply-chain", "threat-intelligence", "side-channel", "data-breach", "mitre", "cwe-top-25", "opensea"]
phying_url: "https://phying.com/item/2751"
lang: en
---

# Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

## Summary

This week's security roundup covers MITRE's 2022 CWE Top 25 led by out-of-bounds write and XSS, the OpenSea vendor data breach, and supply chain and side-channel attack risks.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-07-05T17:00:00Z
- **Original:** https://www.hackerone.com/blog/security-highlights-new-cwe-rankings-software-supply-chains-and-side-channel-attacks
- **Phying News:** https://phying.com/item/2751