Stay Informed

Cybersecurity News

Home / News

Clear

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

574 result(s) for "Supply chain" — best match first.

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

PyTorch Suffers Supply Chain Attack via Dependency Confusion

Users who deployed the nightly builds of PyTorch between Christmas and New Year's Eve likely received a rogue package as part of the installation that siphoned…

Apple

The Hacker News
The Hacker News Breaches & leaks

New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers

Three different security flaws have been disclosed in American Megatrends (AMI) MegaRACBaseboard Management Controller (BMC) software that could lead to remote…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

OpenSSF Announces The Alpha-Omega Project to Improve Software Supply Chain Security for 10,000 OSS Projec

Following a meeting with government and industry leaders at the White House, OpenSSF is excited to announce the Alpha-Omega Project to improve the security pos…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

Container Adoption not Slowed by Supply Chain Attac

Widespread adoption of containerization and DevOps has introduced new cyber risks, but organizations are showing signs of maturing and adapting to the challeng…

Docker

The Hacker News
The Hacker News

Russian Hackers Targeted Ukraine Authorities With Supply-Chain Malware Attack

Ukraine is formally pointing fingers at Russian hackers for hacking into one of its government systems and attempting to plant and distribute malicious documen…

The Hacker News
The Hacker News Breaches & leaks

Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes

Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to …

BleepingComputer
BleepingComputer Breaches & leaks

Chainalysis discloses data breach from "offensive agentic techniques"

Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposin…

The Hacker News
The Hacker News Vulnerabilities

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through…

Windows Chrome

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is already in CISA's KEV. Here's what t…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Breaches & leaks

How to Build a Ransomware Kill Chain Strategy for Linux Security

Ransomware isn't slowing down. If anything, it's getting sharper, more selective, coordinated, and much harder to clean up after. From healthcare systems to su…

Linux

Latest Hacking News
Latest Hacking News Breaches & leaks

Blockchain Firm Harmony Lost $100 Million In Cyber Theft

The blockchain firm Harmony has recently suffered a devastating cyberattack. As confirmed, Harmony lost crypto…Blockchain Firm Harmony Lost $100 Million In Cyb…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

How an OSPO Can Help Secure Your Software Supply Cha

Learn how an open source program office (OSPO) - a bureau of open source experts within your organization dedicated to overseeing how your company uses, create…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

Using Dynamic Admission Control to Secure Your Kubernetes’ Supply Cha

Kubernetes adoption is up - and so is the number of security incidents in container and Kubernetes environments. One of the ways that organizations can tackle …

Docker Kubernetes

Latest Hacking News
Latest Hacking News

5 Cases of Blockchain for Cybersecurity

Blockchain tech is helping the world in more ways than we can think of, and…5 Cases of Blockchain for Cybersecurity on Latest Hacking News

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

Chainlit: What It Does and Why Its Retirement Matters

Chainlit helps developers turn an AI model into a chat app, but it no longer receives security updates.

The Hacker News
The Hacker News Vulnerabilities

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization contro…

BleepingComputer
BleepingComputer Vulnerabilities

Ivanti patches two more Connect Secure zero-days chained in attacks

Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least O…

Ivanti

BleepingComputer
BleepingComputer Vulnerabilities

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that at…

Linux

The Hacker News
The Hacker News Vulnerabilities

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…

Linux Windows Android

The Hacker News
The Hacker News Vulnerabilities

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said t…

The Hacker News
The Hacker News Vulnerabilities

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, …

The Hacker News
The Hacker News Vulnerabilities

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a…

Windows Chrome

The Hacker News
The Hacker News Vulnerabilities

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on …

Ivanti VPN

DataBreaches.net
DataBreaches.net Breaches & leaks

French supermarket chains say cyberattack forced refrigerator shutdown

AFP reports: Major French supermarket chains Intermarche and Cooperative U were hit by a cyberattack that caused their refrigerators to defrost, the two retail…