Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A North Korean state-sponsored threat actor tracked asDiamond Sleetis distributing a trojanized version of a legitimate application developed by a Taiwanese mu…
A North Korean state-sponsored threat actor tracked as Diamond Sleet is distributing a trojanized version of a legitimate application developed by a Taiwanese …
Researchers found a critical vulnerability in the Google Cloud Build that allowed elevated privileges to…A Google Cloud Build Vulnerability Could Aid Supply-Ch…
An analysis of the indicators of compromise (IoCs) associated with the JumpCloud hack has uncovered evidence pointing to the involvement of North Korean state-…
Whenever you buy something, you receive the product of a massive collaboration, not just one company. That shirt started as raw materials at cotton farms that …
In what's a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 …
New cyber research connects the infamous North Korea-aligned Lazarus Group behind the Linux malware attack called Operation DreamJob to the 3CX supply-chain at…
Days after the horrifying cyberattack, more details about the 3CX incident surface online as Mandiant…3CX Cyber Attack: It Was The Aftermath Of Another Supply-…
Enterprise communications service provider 3CX confirmed that thesupply chain attacktargeting its desktop application for Windows and macOS was the handiwork o…
The adversary behind thesupply chain attack targeting 3CXdeployed a second-stage implant specifically singling out a small number of cryptocurrency companies.R…
Enterprise communications software maker 3CX on Thursday confirmed that multiple versions of its desktop app for Windows and macOS are affected by asupply chai…
Chainguard, the co-creator of Sigstore, has conducted a survey to better understand if and how software supply best practices are utilized by the industry. We …
2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 202…
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller (BMC) software, nearly two months afterthree security v…
Technology is advancing at a rapid rate. It seems that the next new development is…The state of software supply chain security heading into 2023 on Latest Hack…
An Iranian advanced persistent threat (APT) actor known asAgriushas been attributed as behind a set of data wiper attacks aimed at diamond industries in South …
Sigstore that is backed by Google, Red Hat, GitHub, and other prominent organizations with an aim to secure the open-source software supply chain has reached g…
The financial services company's prototype system based on CNCF's software supply chain security guidelines joins OpenSSF's $150 million open source standards …
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT d…
An advanced persistent threat (APT) group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on …
A number of security vulnerabilities have been disclosed in 42 Gears' SureMDM device management solution that could be weaponized by attackers to perform a sup…
A number of security vulnerabilities have been disclosed in 42 Gears' SureMDM device management solution that could be weaponized by attackers to perform a sup…
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
To address the growing threat of software supply chain attacks , the Linux Foundation announced at the at the Linux Foundation Membership Summit that it is upg…
