supply chain
CrowdStrike Glassworm Takedown Exposes Developer Supply Chain Risk
CrowdStrike announced it has taken down the Glassworm botnet, a global threat campaign attacking software developers through open source tools. The company simultaneously struck Glassworm’s four command-and-control (C2) channels alongside collaborators Google ...
Security Boulevard
The Real Power of Resilience with Dell Technologies
Organizations currently overspend on preventative security by about 78% compared to operational resilience. We have spent decades building taller walls and stronger locks to keep threat actors out of the data center ...
Security Boulevard
The Extension Blind Spot: How One VS Code Plugin Gave Attackers GitHub’s Source Code
GitHub's 3,800 Repositories Stolen Through a Single IDE Extension On May 19, 2026, a single VS Code extension on a single employee's device gave attackers access to 3,800 of GitHub's internal repositories ...
Xinference PyPI Supply Chain Poisoning Warning
NSFOCUS | | Blog, Emergency Response, PyPI, supply chain, supply chain poisoning, Xinference, Xorbits Inference
Overview Recently, NSFOCUS CERT detected that Xinference had suffered supply chain poisoning in its PyPI warehouse. The attacker stole the PyPI release permission credentials of Xinference maintainers and released three consecutive malicious ...
Axios supply chain attack chops away at npm trust
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
BPFdoor in Telecom Networks: The FCC Is Securing the Edge, but China’s Hackers Are Already Past It
Mike Bell | | APT, BPF door, China-nexus, Critical Infrastructure, dark web, Kernel Implant, nation-state, Red menshen, Salt Typhoon, security, supply chain, Telecom
Rapid7's research reveals China-linked kernel implants deep inside telecom signaling infrastructure. Here's what BPFdoor is, how it evolved, and what defenders need to do now ...
What the UK Cyber Security & Resilience Bill Means for Security Practitioners
The UK Cyber Security & Resilience Bill is progressing through Parliament Royal Assent expected later in 2026.The UK's Cyber Security and Resilience Bill is working its way through Parliament, and if you ...
What the UK Cyber Security & Resilience Bill Means for Security Practitioners
The UK Cyber Security & Resilience Bill is progressing through Parliament Royal Assent expected later in 2026.The UK's Cyber Security and Resilience Bill is working its way through Parliament, and if you ...
Destructive Activity Targeting Stryker Highlights Emerging Supply Chain Risks
On March 11th, medical technology company Stryker disclosed that a cyberattack had disrupted portions of its global network infrastructure, affecting Microsoft systems used across the organization. The post Destructive Activity Targeting Stryker ...
Internal Analysis: Even Realities G2 Smart Glasses Security & Privacy Investigation
Suzu Labs Intelligence | | insider threat, Offensive Security, Penetration Testing, social engineering, supply chain, Vulnerability Management, Wearable Tech
Executive Summary Even Realities markets its G2 smart glasses as the privacy-conscious alternative to Meta Ray-Bans. The core pitch: no camera, no speakers, no visual surveillance. Tech media has accepted this framing ...

