Tag: supply chain security
-
Anchore: NPM Supply Chain Breach Response for Anchore Enterprise and Grype Users
Source URL: https://anchore.com/blog/npm-supply-chain-breach-response-for-anchore-enterprise-and-grype-users/ Source: Anchore Title: NPM Supply Chain Breach Response for Anchore Enterprise and Grype Users Feedly Summary: On September 8, 2025 Anchore was made aware of an incident involving a number of popular NPM packages to insert malware. The technical details of the attack can be found in the Aikido blog post: npm…
-
Krebs on Security: 18 Popular Code Packages Hacked, Rigged to Steal Crypto
Source URL: https://krebsonsecurity.com/2025/09/18-popular-code-packages-hacked-rigged-to-steal-crypto/ Source: Krebs on Security Title: 18 Popular Code Packages Hacked, Rigged to Steal Crypto Feedly Summary: At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in maintaining the projects was phished. The…
-
The Register: Pentagon ends Microsoft’s use of China-based support staff for DoD cloud
Source URL: https://www.theregister.com/2025/08/29/pentagon_ends_microsofts_use_of/ Source: The Register Title: Pentagon ends Microsoft’s use of China-based support staff for DoD cloud Feedly Summary: ‘It blows my mind,’ says SecDef The Pentagon has formally kiboshed Microsoft’s use of China-based employees to support Azure cloud services deployed by US government agencies, and it’s demanding Microsoft do more of its own…
-
Docker: Secure by Design: A Shift-Left Approach with Testcontainers, Docker Scout, and Hardened Images
Source URL: https://www.docker.com/blog/a-shift-left-approach-with-docker/ Source: Docker Title: Secure by Design: A Shift-Left Approach with Testcontainers, Docker Scout, and Hardened Images Feedly Summary: In today’s fast-paced world of software development, product teams are expected to move quickly: building features, shipping updates, and reacting to user needs in real-time. But moving fast should never mean compromising on quality…
-
The Register: Putin on the code: DoD reportedly relies on utility written by Russian dev
Source URL: https://www.theregister.com/2025/08/27/popular_nodejs_utility_used_by/ Source: The Register Title: Putin on the code: DoD reportedly relies on utility written by Russian dev Feedly Summary: Fast-glob is widely used in government, security lab says A Node.js utility used by thousands of public projects – and more than 30 Department of Defense ones – appears to have a sole…