supply chain attack
-
techHacker Group TeamPCP Poisons Open Source Code at Unprecedented Scale
TeamPCP has breached GitHub and hundreds of firms via software supply chain attacks, using a self-spreading worm to steal credentials and data.
-
techGitHub Confirms Theft of 3,800 Internal Repos via Malicious VS Code Extension
A GitHub employee installed a poisoned VS Code extension, leading to the exfiltration of roughly 3,800 internal code repositories by hacker group TeamPCP.
-
techSoftware Supply Chains: The New Cyber Battleground for Enterprises
Recent AI-driven supply chain attacks, like TeamPCP, expose critical risks. Expert analysis on defending enterprise software infrastructure.
-
techFake OpenAI Model on Hugging Face was Actually a InfoStealer
A malicious Hugging Face repository impersonating OpenAI's privacy filter hit number one, stealing passwords and crypto keys from thousands of developers.
-
techNorth Korean Hackers Compromise Axios Open Source Library
North Korean state-sponsored hackers targeted the Axios HTTP library maintainer, compromising a widely-used open source package and exposing thousands of organizations to credential theft.
-
techTrivy Scanner Breach Exposes Global Dev Pipelines
Cyberattack compromises Trivy vulnerability scanner, exposing CI/CD pipelines worldwide. Developers urged to rotate secrets immediately.