7 articles
A cyberattack targeting Klue led to a supply chain data breach affecting several cybersecurity firms via compromised Salesforce integrations. Learn what happened, which companies were impacted, and the security lessons from the incident.
Microsoft disabled dozens of GitHub repositories after a supply chain attack injected credential-stealing malware into open-source developer tools used with AI coding platforms. Learn what…
Google, CrowdStrike, and the Shadowserver Foundation have dismantled the Glassworm botnet, a cybercriminal network that targeted open-source software developers through malicious packages…
A major open-source project was reportedly hijacked in a cyberattack linked to North Korea, raising serious concerns over software supply chain security.
Mercor says it was hit by a cyberattack linked to a compromised open-source LiteLLM project, raising concerns about AI security and supply chain risks.
North Korean hackers allegedly hijacked the Axios open-source project to spread malware, raising serious concerns about supply chain security in open-source software.
Notepad++ revealed that suspected Chinese state-backed hackers compromised its software update mechanism for months, exposing users to potential security risks.
Written by the reporters who cover each beat. Unsubscribe in one click.
