Supply Chain Attack on Trivy(wiz.io)

6 points by tiri 7 months ago | 0 comments

RubyGems Open Source Supply Chain Security and OpenAI(rietta.com)

33 points by rietta 1 month ago | 4 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)

285 points by cyberbender 1 year ago | 53 comments

Polyfill supply chain attack hits 100K+ sites(sansec.io)

738 points by gnabgib 2 years ago | 304 comments

Sansec threat research post reporting that the new Chinese owner of the Polyfill JS project is injecting malware into more than 100,000 websites.

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM(aikido.dev)

317 points by birdculture 11 months ago | 98 comments

Aikido Security blog post reporting a second Shai Hulud npm supply-chain attack compromising packages from Zapier, ENS, AsyncAPI, PostHog, and Postman.

Vercel April 2026 security incident(bleepingcomputer.com)

817 points by colesantiago 6 months ago | 466 comments

Vercel security bulletin disclosing unauthorized access to certain internal systems in April 2026, affecting a limited subset of customers, with an ongoing investigation.

It's time to talk about TEEs(alinush.github.io)

13 points by joshcsimmons 8 days ago | 2 comments

A blog post by Alin Tomescu surveying attacks on trusted execution environments (TEEs) and urging developers to reconsider deploying TEE-based applications.

Claude Cowork exfiltrates files(promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.

Internet Archive: Security breach alert(theverge.com)

1029 points by ewenjo 2 years ago | 564 comments

The Verge reports the Internet Archive suffered a breach exposing info for 31 million accounts amid days of DDoS attacks, revealed via a popup message.

Crypto in 2026: Oh, This Is the Bad Place(stephendiehl.com)

325 points by ibobev 4 months ago | 407 comments

Stephen Diehl blog post criticizing the state of crypto in 2026, citing a presidential memecoin, prediction markets on military actions, and shadow dollar systems.

Microsoft breached antitrust rules by bundling Teams and Office, EU says(apnews.com)

669 points by cbg0 2 years ago | 734 comments

AP News article reporting that the European Union found Microsoft breached antitrust rules by bundling Teams with its Office software.