Experimental News Clipping Site

Tag: supply chain compromise

  • The Register: Self-propagating worm fuels latest npm supply chain compromise

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/16/npm_under_attack_again/ Source: The Register Title: Self-propagating worm fuels latest npm supply chain compromise Feedly Summary: Intrusions bear the same hallmarks as recent Nx mess The npm platform is the target of another supply chain attack, with crims already compromising 187 packages and counting.… AI Summary and Description: Yes Summary: The text discusses a…

  • The Register: Zscaler latest victim of Salesloft Drift attacks, customer data exposed

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/ Source: The Register Title: Zscaler latest victim of Salesloft Drift attacks, customer data exposed Feedly Summary: Joins Google, Palo Alto Networks in the ever-growing supply chain compromise Zscaler is the latest company to disclose some of its customers’ data was exposed in the recent spate of Salesloft Drift attacks affecting Salesforce databases.……

  • Cloud Blog: Google named a Leader in IDC MarketScape: Worldwide Incident Response 2025 Vendor Assessment

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/identity-security/google-named-a-leader-in-idc-marketscape-worldwide-incident-response-2025-vendor-assessment/ Source: Cloud Blog Title: Google named a Leader in IDC MarketScape: Worldwide Incident Response 2025 Vendor Assessment Feedly Summary: Today’s cybersecurity landscape requires partners with expertise and resources to handle any incident. Mandiant, a core part of Google Cloud Security, can empower organizations to navigate critical moments, prepare for future threats, build…

  • Slashdot: Google’s New Security Project ‘OSS Rebuild’ Tackles Package Supply Chain Verification

    —

    by

    Kurt Seifried
    in

    Source URL: https://news.slashdot.org/story/25/07/28/0254233/googles-new-security-project-oss-rebuild-tackles-package-supply-chain-verification?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google’s New Security Project ‘OSS Rebuild’ Tackles Package Supply Chain Verification Feedly Summary: AI Summary and Description: Yes Summary: Google’s Open Source Security Team has launched a project called OSS Rebuild aimed at enhancing security and transparency in open-source package ecosystems. This initiative focuses on automating the reconstruction of…

  • Alerts: Supply Chain Compromise of Third-Party GitHub Action, CVE-2025-30066

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/03/18/supply-chain-compromise-third-party-github-action-cve-2025-30066 Source: Alerts Title: Supply Chain Compromise of Third-Party GitHub Action, CVE-2025-30066 Feedly Summary: A popular third-party GitHub Action, tj-actions/changed-files (tracked as CVE-2025-30066), was compromised. This GitHub Action is designed to detect which files have changed in a pull request or commit. The supply chain compromise allows for information disclosure of secrets including,…