RubyGems Open Source Supply Chain Security and OpenAI(rietta.com)

33 points by rietta 1 month ago | 4 comments

Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)

285 points by cyberbender 1 year ago | 53 comments

Active NPM supply chain attack: Tinycolor and 40 Packages Compromised(socket.dev)

29 points by feross 1 year ago | 4 comments

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)

77 points by nyku 2 months ago | 26 comments

Supply Chain Attacks on Linux Distributions(fenrisk.com)

7 points by ramimac 1 year ago | 0 comments

Flock Hardcoded the Password for America's Surveillance Infrastructure 53 Times(nexanet.ai)

456 points by fuck_flock 9 months ago | 147 comments

Nexanet threat intel blog post reporting that Flock Safety hardcoded a password 53 times across its surveillance infrastructure software.

Polymarket has flooded social media with deceptive videos by paid creators(wsj.com)

415 points by Vaslo 4 months ago | 298 comments

WSJ article reporting that Polymarket has paid creators to post deceptive social media videos promoting its prediction market bets.

Inside Polymarket's paid quote-retweet esports program(readergrev.com)

80 points by paimapi 10 days ago | 53 comments

A Readergrev investigation into Polymarket's program paying esports accounts to quote-retweet its posts while making the promotion appear organic.

European ISPs Want Rightsholders Held Accountable for Overblocking Damage(torrentfreak.com)

348 points by Brajeshwar 3 months ago | 98 comments

TorrentFreak article reporting that EuroISPA asks the EU Commission to hold rightsholders liable for damage caused by overblocking in site blocking orders.

Ukrainian hackers destroyed the IT infrastructure of Russian drone manufacturer(prm.ua)

585 points by doener 1 year ago | 400 comments

Pryamiy news article reporting that Ukrainian hackers destroyed the IT infrastructure of a Russian drone manufacturer, with details of what is known.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.