6 stories tagged supply-chain-attacks, newest first.
441 points by marc__1 | 231 comments
A post by John Scott-Railton noting malware authors embedded nuclear and bioweapons text in spyware to trigger LLM safety refusals and evade AI security scanners.
325 points by alligatorplum | 144 comments
A satirical blog post, in the style of The Onion, mocking npm for recurring supply chain attacks while claiming nothing could prevent them.
658 points by miniBill | 156 comments
A satirical incident report by Andrew Nesbitt about a cascading software supply chain attack spanning JavaScript, Rust, and Python package ecosystems.
813 points by psxuaw | 427 comments
Short blog post by Xe Iaso noting new Linux kernel vulnerabilities and advising a week-long pause on installing new software due to supply chain attack risk.
476 points by saeedesmaili | 226 comments
Obsidian blog post explaining how the note-taking app minimizes dependencies and other design choices to reduce the risk of software supply chain attacks.
486 points by zdw | 157 comments
lcamtuf's Substack post investigating claims that a cheap RJ45 Ethernet dongle contains malicious hardware, reverse-engineering it to assess supply-chain sabotage.