OpenAI Responds to Axios npm Supply Chain Attack, Rotates macOS Certificates
The company confirmed that no malicious applications signed with its certificate have been identified so far.
Tag: supply chain attack
North Korea’s Lazarus Group Behind the Axios npm Supply Chain Attack
On Monday, the Axios npm supply chain attack came to light where malicious packages had been inserted into one of ...
Shai-Hulud Supply Chain Attack Drained $8.5 Million from Trust Wallet Users
Trust Wallet users had $8.5 million in crypto assets stolen in a cyberattack linked to the second wave of the ...
New Shai-Hulud Attack Hits Nearly 500 npm Packages with 100+ Million Downloads
A new Shai-Hulud supply chain attack has hit nearly 500 npm packages with a total of 132 million monthly downloads. ...
CrowdStrike Among Those Hit in NPM Attack Campaign
More than 20 CrowdStrike NPM packages were among nearly 200 NPM packages hit by a sophisticated supply chain attack. The ...
Massive NPM Supply Chain Attack Earned Only $600 for Attackers
A massive NPM supply chain attack that hit about 10% of all cloud environments yielded little for the hackers who ...
Supply Chain Resilience and Physical Security: Lessons for 2025
Supply chain attacks burst into consciousness with the SolarWinds and Kaseya breaches of 2020-2021, and if anything, risk has increased ...
Versa Director Flaw Could Lead to API Attacks, Token Theft
As Versa Director is used by ISPs and MSPs, any exposed vulnerability could lead to a supply chain attack.
Versa Director Zero-Day Attack: A Non-Critical Vulnerability with Low Exposure Can Still Be Trouble
A medium severity vulnerability with a few dozen exposures can lead to great damage when nation-state actors target ISPs and ...
WordPress Plugins Hit by Supply Chain Attack: Update Now!
The injected malware's primary function involves attempting to create unauthorized administrative user accounts on affected websites.
Q1 2026 Threat Reports
❮
❯