A supply chain attack on SAP npm packages used preinstall scripts to steal developer and CI/CD credentials. The post SAP npm Supply Chain Attack...

Researchers demonstrated a Claude Code attack that steals OAuth tokens through malicious MCP integrations and npm hooks. The post Claude Code MCP...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication...

AI-assisted development is expanding software supply chain risks faster than security controls can keep pace. The post AI Is Reshaping Software Supply...

The software developer has identified the impacted systems, removed potentially compromised files, and validated installation packages. The post...

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The...

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The...

A ShinyHunters-linked attack disrupted hundreds of Instructure Canvas portals during finals week. The post ShinyHunters Extorts Universities in New...

What Is a Supply Chain Attack? A supply chain attack is a cybersecurity breach where attackers compromise a… The post What Is Supply Chain Attack...