Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 9)

241.

Making PyPI's test suite 81% faster

blog | 2025-05-01 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi

242.

A New Kali Linux Archive Signing Key

blog | 2025-04-28 00:00 | kali.org | original ↗ | #supply-chain | #incident-response | #apt

243.

XRP supply chain attack: Official NPM package infected with crypto stealing backdoor

incident | 2025-04-22 00:00 | aikido.dev | original ↗ | #supply-chain | #cryptocurrency | #npm

244.

Research Briefing: MCP Security

blog | 2025-04-17 14:00 | wiz.io | original ↗ | #ai-security | #supply-chain | #cloud-security

245.

The malware dating guide: Understanding the types of malware on NPM

blog | 2025-04-10 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm

246.

Crying out Cloud: Our Favorite Stories of 2024

blog | 2025-04-09 15:33 | CVE-2024-3094 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

247.

Hide and Fail: Obfuscated Malware, Empty Payloads, and npm Shenanigans

blog | 2025-04-03 00:00 | aikido.dev | original ↗ | #rce | #supply-chain | #malware

248.

Launching Aikido Malware – Open Source Threat Feed

research | 2025-03-31 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #open-source

249.

Why Lockfiles Matter for Supply Chain Security

blog | 2025-04-01 00:00 | aikido.dev | original ↗ | #supply-chain | #dependency-management | #npm

250.

Importance of Continuous Security: Lessons from the Bybit Case

research | 2025-03-27 06:38 | theori.io | original ↗ | #supply-chain | #web3 | #social-engineering

251.

Container Scanning & Vulnerability Management

vulnerability | 2025-03-20 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #secrets

252.

New GitHub Action supply chain attack: reviewdog/action-setup

incident | 2025-03-17 21:28 | CVE-2025-30154 | wiz.io | original ↗ | #supply-chain | #github-actions | #ci-cd

253.

Get the TL;DR: tj-actions/changed-files Supply Chain Attack

incident | 2025-03-16 00:00 | CVE-2025-30066 | aikido.dev | original ↗ | #supply-chain | #incident-response | #github-actions

254.

What you need to know about H.R. 872

blog | 2025-03-06 20:26 | bugcrowd.com | original ↗ | #supply-chain | #vdp | #vulnerability-disclosure

255.

The UK’s AI Cyber Security Code of Practice: What It Means for Your Business

blog | 2025-02-27 20:24 | hackerone.com | original ↗ | #ai-security | #supply-chain | #ai-governance

256.

The biggest security risks facing the maritime shipping industry

blog | 2025-02-27 13:00 | bugcrowd.com | original ↗ | #supply-chain | #ransomware | #ics

257.

2025 State of Code Security: Key Trends and Risks

blog | 2025-02-20 16:38 | wiz.io | original ↗ | #cloud | #supply-chain | #github

258.

The Overlooked Attack Surface: Securing Code Repositories, Pipelines, and Developer Infrastructure

blog | 2025-02-14 11:20 | wiz.io | original ↗ | #supply-chain | #cloud-security | #devsecops

259.

Container Security Best Practices in 2026

blog | 2025-02-13 00:00 | aikido.dev | original ↗ | #supply-chain | #kubernetes | #container-security

260.

DeepSeek Security, Privacy, and Governance: Hidden Risks in Open-Source AI

research | 2025-02-06 15:00 | theori.io | original ↗ | #ai-security | #supply-chain | #privacy

261.

Celebrating our 2024 open-source contributions

blog | 2025-01-23 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #cryptography

262.

Security audit of the Notary Project

research | 2025-01-20 23:00 | blog.quarkslab.com | original ↗ | #supply-chain | #audit | #ostif

263.

VS Code Extension Impersonating Zoom Targets Google Chrome Cookies

blog | 2025-01-21 00:00 | hunt.io | original ↗ | #supply-chain | #malware | #browser-extension

264.

Cyberhaven Extension Compromise: TLS Certificates Reveal Hidden Infrastructure

blog | 2025-01-09 00:00 | hunt.io | original ↗ | #supply-chain | #browser-extension | #tls-certificates

265.

2025 Cloud Security Predictions: Trends to Look Out for

blog | 2025-01-06 15:00 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

266.

2025 cybersecurity predictions

blog | 2024-12-19 17:09 | bugcrowd.com | original ↗ | #ai-security | #supply-chain | #red-teaming

267.

New York Releases AI Cybersecurity Guidance: What You Need to Know

blog | 2024-12-16 21:37 | hackerone.com | original ↗ | #ai-security | #supply-chain | #compliance

268.

Ultralytics AI Library Hacked via GitHub for Cryptomining

incident | 2024-12-09 15:56 | wiz.io | original ↗ | #ai-security | #supply-chain | #github-actions

269.

Auditing the Ruby ecosystem's central package repository

blog | 2024-12-11 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #ruby | #open-source

270.

35 more Semgrep rules: infrastructure, supply chain, and Ruby

blog | 2024-12-09 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #ruby | #infrastructure-as-code

← Previous More →