Website Supply Chain Attacks

CISA Warns CISOs to Brace for Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a United States federal agency under the oversight of the Department of Homeland Security, is urging business leaders and those responsible for digital security ...

WordPress Supply Chain Attack—93 Add-Ons Infected for Months
A popular maker of WordPress plugins and themes was hacked—93 of AccessPress’s offerings were modified to give the hackers “full access” to users’ sites ...
Recent NPM package hack is an alarming reminder of the risks of website supply-chain fraud
There are over 1.8 billion websites online today. Almost 98% of them are powered by JavaScript, and for a good reason: JavaScript’s flexibility and portability enable the rich online functionality we’ve all ...