أخبار الأمن التي تهمّ، يشرحها فريقنا — مع الخطوات العملية الواجب اتخاذها.
تُجمع كل ساعتين من منشورات متخصصة — كل رابط يقود إلى المقال الأصلي.
لا توجد أخبار بلغتك بعد — إليك تغطيتنا باللغة الإنجليزية:
The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company, demonstrating a new level of sophi…
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) p…
Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and netw…
Supply chains have become increasingly complex and interconnected, leading to new vulnerabilities that businesses cannot…Why Modern Businesses Need Supply Chai…
Wordfence security researchers recently shed light on an infamous supply chain attack that may have affected as many as 36,000 WordPress websites. Five widely …
Wordfence security researchers recently shed light on an infamous supply chain attack that may have affected as many as 36,000 WordPress websites. Five widely …
Section four of the "Executive Order on Improving the Nation’s Cybersecurity" introduced a lot of people in tech to the concept of a “Software Supply Chain” an…
The popular communication software business 3CX has admitted a supply-chain attack, potentially affecting its customers…Phone Systems Giant 3CX Supply-Chain At…
Microsoft announced that its Secure Supply Chain Consumption Framework (S2C2F) has been adopted by the Linux Foundation's Open Source Security Foundation (Open…
Researchers discovered a sophisticated supply-chain attack on chat service provider Comm100 that affected numerous companies.…Comm100 Chat Service Hacked In A …
Another serious supply-chain attack has surfaced online potentially affecting thousands of customers. This time, the…Passwordstate Password Manager Suffered Su…
Imagine this: you're neck-deep in code, deploying a Python app you've poured hours into. Your dependencies''those trusty libraries''are the silent workhorses i…
3CX said it'sworking on a software updatefor its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chai…
3CX said it'sworking on a software updatefor its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chai…
IBM has fixed a high-severity security vulnerability affecting its Cloud Databases (ICD) for PostgreSQL product that could be potentially exploited to tamper w…
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhe…
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Back…
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according…
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that ha…
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release …
At least 15 malicious plugins and nearly 70,000 installs later, developers are being reminded that trusted marketplaces can become supply-chain attack vectors …
Researchers recently identified another wave of malicious packages on PyPI linked to the broader Mini Shai-Hulud campaign, a worm-like supply chain attack that…
IronWorm steals credentials and uses them to spread beyond the original victim, turning developer access into a supply chain risk.
Microsoft's GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign.The incident impacted…