Coverage tagged "Supply Chain".
The 2026 Infostealer Index An independent, deep-dive analysis of Hudson Rock’s benchmark threat intelligence evaluations. Ranking 34 vendors across 9 critical vectors. As infostealer malware…
I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This code integrity problem could be…
Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja chemical industrial corridor in…
On June 22, 2026, the heads of the Five Eyes cyber security agencies issued a direct warning to business and technology leaders: AI is rapidly transforming cyber risk, and long-standing assumptions…
French Supermarket Cyberattack: Exposed OT Behind France’s Food Supply Supermarkets across France opened on Monday, October 12, to warm freezers and spoiled stock. Overnight, attackers had taken…
Valenti Management is known as the Tampa-based Wendy's franchise operator.
Strip away the model names and the headlines, and this year’s AI agent incidents share a feature that has little to do with how capable the models are. Nearly all of them ran through the software…
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers
arXiv:2610.12893v1 Announce Type: new Abstract: The rapid integration of Artificial Intelligence (AI) models has established a complex supply chain, but many of these shared artifacts harbor severe…
Elastic Security Labs identified a malicious npm package, @apexacc/cli, which led us to an operation posing as a Web3 accelerator. That operation had spent months building a public presence…
arXiv:2610.10735v1 Announce Type: new Abstract: Pre-trained models (PTMs) are widely distributed as serialized binaries, but their reuse often exposes software supply chains to deserialization…
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three…
Coverage period: July 1, 2026 through September 30, 2026 Overview This roundup consolidates selected major AI-related security incidents and exploit disclosures reported during the coverage period…
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud…
Unit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The…
FortiBleed Is Still Active, Locking Organizations Out On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential…
A breach of 8.8 million citizens on the Danish Central Register of Persons (CPR) occurred via third-party access
arXiv:2610.07510v1 Announce Type: new Abstract: Developers can build LLM agents by adapting third-party models through benign post-training. We study a supply-chain threat in which an attacker…
OverviewMost teams running SonarQube Server already have software developers using coding agents. What they do not have is a way to say what standard those agents are working to. Each AI agent gets…
