PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

New Insights on Supply Chain and Ransomware Attacks From Our Chat With Alex Stamos and Charles Carmakal

bishopfox.com | incident | #supply-chain | #incident-response | #threat-intelligence | #ransomware | #solarwinds | #webcast
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Six months after SolarWinds, Alex Stamos, Charles Carmakal, and Vinnie Liu discuss attackers' reuse of community tools leaving trackable footprints, and why incident investigations should be public.
Published
Collected

Related coverage

research · volexity.com
Responding to the SolarWinds Breach: Detect, Prevent, and Remediate the Dark Halo Supply Chain Attack
Earlier this week, Volexity published a blog post providing details observed from multiple incident response efforts involving Dark Halo, the group tied to the SolarWinds breach. Since publication, Volexity has fielded and […]
incident · certik.com
PaperTrade BBO Pricing Incident
PaperTrade reported manipulation attempts on 10–11 October 2026 targeting the Hyperliquid best bid and ask (BBO) used to price its synthetic positions. The project acknowledged the attempts on 11 October. The account examined in this analysis withdrew 1,279,106.191184 USDC more than it deposited. PaperTrade settled positions at the instantaneous BBO midpoint, while its profit haircut used a fixed reference notional. This linked large synthetic payouts to an influenceable quote without increasing the haircut percentage as position size grew.
incident · vercel.com
Critical npm supply chain attack response – September 8, 2025
How Vercel responded to the September 2025 npm supply chain attack on chalk, debug and 16 other packages. Incident timeline, impact analysis, and customer remediation.
incident · netspi.com
Healthcare’s Guide to Ryuk Ransomware: Advice for Prevention and Remediation
Making its debut in 2018, the Ryuk ransomware strand has wreaked havoc on hundreds of businesses and is responsible for one-third of all ransomware attacks that took place in 2020.
blog · aikido.dev
LiteLLM compromised again: infostealer and RAT found in version 1.107.0
# LiteLLM compromised again: infostealer and RAT found in version 1.107.0 Written by Ilyas Makari Published on: Oct 21, 2026 On October 21, 2026, version 1.107.0 of LiteLLM (a popular open source...
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
Back