Notepad++'s update infrastructure was compromised for six months by sophisticated hackers linked to the Chinese state, who delivered malicious updates…
Read More »software supply chain
The Linux desktop is seeing unprecedented growth as user dissatisfaction with Windows drives adoption, though fragmentation among distributions remains a…
Read More »
Black Kite's new Product Analysis module enables security teams to assess software supply chain vulnerabilities at the individual product level,…
Read More »
A malware campaign called Shai-Hulud compromised hundreds of NPM packages, exposing roughly 400,000 raw secrets from thousands of GitHub repositories,…
Read More »
A sophisticated worm called Shai-Hulud is actively stealing developer credentials and spreading across hundreds of npm packages, impacting millions of…
Read More »
A self-propagating npm package called 'IndonesianFoods' has flooded the registry with over 100,000 junk packages, using random Indonesian names and…
Read More »
Cisco has released critical patches for UCCX vulnerabilities (CVE-2025-20358 and CVE-2025-20354) that could allow attackers to bypass authentication and gain…
Read More »
Heisenberg transforms static Software Bills of Materials (SBOMs) into dynamic defense tools by evaluating dependency health using data from deps.dev,…
Read More »
Dependency-Track is an open-source platform that provides continuous, real-time monitoring of software supply chain risks by analyzing Software Bills of…
Read More »
The Cybersecurity Information Sharing Act (CISA 2015) has expired, removing legal immunity for companies that share cyber threat intelligence and…
Read More »
The npm registry faces increasing threats from attacks like phishing campaigns and the self-propagating "Shai-Hulud" worm, leading GitHub to implement…
Read More »
A self-replicating worm named Shai-Hulud has infected hundreds of open-source JavaScript packages on NPM, actively seeking credentials to spread further…
Read More »
A self-replicating worm named "Shai-hulud" is spreading through the npm ecosystem, infecting over 180 packages and stealing developer credentials to…
Read More »
Businesses face challenges in securing software supply chains due to open-source adoption and strict data regulations, which HCL AppScan 360º…
Read More »
An international coalition of 21 government agencies has released new guidelines to promote Software Bills of Materials (SBOMs) for enhancing…
Read More »
The US Cybersecurity and Infrastructure Security Agency has launched a free interactive web tool to help organizations evaluate software assurance…
Read More »
The popular Stylus CSS preprocessor was accidentally removed from the npm registry due to a false security flag, disrupting global…
Read More »
Only 23% of organizations have strong software supply chain visibility, leaving most vulnerable to cybersecurity risks and disruptions. 80% of…
Read More »
Red Hat launched a specialized enterprise Linux platform for business developers, offering free access to robust development tools while ensuring…
Read More »
Cybersecurity experts discovered a malware campaign by Banana Squad targeting developers via 67 fake GitHub repositories, distributing trojanized Python files…
Read More »