Tag: supply-chain
-
Anthropic IPO to Test AI Industry’s Financial Viability
Potential $1.5 Trillion Valuation Raises Stakes for Frontier Model Makers and AI Supply Chain. The Anthropic IPO represents the first true test of the longevity and financial viability of AI as a sector, and it may affect how other companies within the AI supply chain may or may not benefit from the monster-sized investment Anthropic…
-
Why Europe’s Freezer Hacks Spread So Far, So Fast
Tags: supply-chainEurope’s supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale. First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/europes-freezer-hacks-spread-so-far-so-fast
-
ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers
Tags: ai, attack, banking, breach, cloud, cyber, data-breach, finance, framework, infrastructure, LLM, penetration-testing, supply-chainAn autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is publicly exposed across 1,465 hosts. The findings show that ARTEX, an LLM-driven offensive security platform released in July 2026, appears alongside conventional attack infrastructure while leaking sensitive operational files. Censys observed the exposed consoles as of November 4, but the…
-
French Bank Loses 100 Million Euros in Cyberattack
Crédit Mutuel Arkéa Blames Third-Party Breach. French financial institution Crédit Mutuel Arkéa says a cyberattack led to the theft of 100 million euros – $112 million – which it is now trying to recover. Crédit Mutuel Arkéa says it fell victim to a supply chain attack that did not involve human error. First seen on…
-
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game’s PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nikke-pc-game-launcher-hacked-to-spread-remote-access-data-stealing-malware/
-
Refrigeration Cyberattacks Nearly Sabotage French Blood Bank
A British Food Wholesaler Ripped Out Its Internet Connection During Cyberattack. The scope of this latest wave of cyberattacks on European refrigeration facilities is expanding, with reports of impact in the British food supply chain, and a near-miss at France’s public blood bank. Temperature and defrosting thresholds were raised to very high levels in cold…
-
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.”The injected JavaScript code collects browser and device attributes,” Sekoia researchers Amaury-Jacques Garçon and…
-
Who is hacking Europe’s supermarket fridges and freezers, and why?
After a second apparent cyber-attack in as many weeks, we examine possible culprits and their motives<ul><li><a href=”https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack”>Shop fridges and freezers across Europe hit by fresh suspected cyber-attack</li></ul>Supermarket fridges and freezers in seven European countries <a href=”https://www.theguardian.com/world/2026/nov/02/supermarket-freezers-across-europe-hit-by-second-suspected-cyber-attack”>have malfunctioned, their thermostats remotely cranked up in some cases to 50C (122F).The EU has condemned what it said was…
-
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines. First seen on wired.com Jump to article: www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/
-
Top cybersecurity conferences to attend in 2027
AI, global conflict and supply chain security are likely to be top of mind at many of the year’s big events. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/top-cybersecurity-conferences-to-attend-in-2027/832981/
-
Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files
Kaspersky researchers have uncovered NetamLoader, a .NET loading framework built on XAML markup. It appears to be a supply-chain attack on a customized Windows build used only by Asian government bodies. No known APT group has been linked to it. NetamLoader malware Kaspersky Security Network flagged a .config file that used AppDomainManager injection to load…
-
GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ghostaction-hacking-wave-fizzles-attackers-github
-
Energy Giant Engie Notifies Customers of Supply Chain Breach
An undisclosed number of Engie customers have had their data compromised after a supply chain incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/energy-giant-engie-supply-chain/
-
SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack
A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/sboms-alone-scope-supply-chain-attack
-
Exposed LiteLLM Key Enabled PyPI Supply Chain Attack
Unrevoked Credential Exposed in May Enabled Repository Compromise in October. An attacker exploited an unrevoked LiteLLM master key to steal GitHub credentials, bypass release controls and publish a credential-stealing PyPI package downloaded roughly 50,000 times, exposing developer systems, cloud environments and AI provider secrets. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/exposed-litellm-key-enabled-pypi-supply-chain-attack-a-33211
-
‘Gheist’ Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/gheist-stolen-github-tokens-cloud-secrets
-
âš¡ Weekly Recap: This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with.And that’s not even the full story.…
-
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May was behind a supply-chain attack that is believed to have hit tens of thousands of users last week. First seen on therecord.media Jump to article: therecord.media/litellm-hackers-ai-malware
-
Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack
Hackers accessed LiteLLM’s GitHub organization and executed credential-stealing workflows eleven days before the October 21 supply chain attack that distributed malicious litellm==1.107.0 packages. The findings establish a longer compromise window preceding the poisoned releases. Socket recovered malicious workflows executed inside BerriAI/litellm on October 10 and October 12, 2026. Both used the maintenance-style commit message ci:…
-
ISMG Editors: Stolen Vendor API Secret Exposes Microsoft 365
ConnectWise Supply-Chain Hack, Rogue AI Agents and Rising AI Token Costs. In this week’s panel, four ISMG editors discussed the potentially far-reaching supply-chain attack involving ConnectWise, growing concerns over rogue AI agents, and Microsoft and Nvidia’s push to bring AI processing back onto company hardware as enterprises grapple with rising token costs. First seen on…
-
Large businesses’ cybersecurity insurance claims are now less frequent but more expensive
AI-powered attacks and hidden supply-chain weaknesses are making insurers’ work more difficult, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cybersecurity-insurance-market-ai-supply-chain/833841/
-
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack
-
China-Aligned Hackers Used Agentic AI to Target ConnectWise
Tags: access, ai, attack, china, cloud, credentials, framework, hacker, microsoft, open-source, supply-chainMicrosoft Ties Storm-0940 to Automated Intrusions Across Hundreds of Targets. Microsoft linked the ConnectWise supply chain compromise to China-aligned Storm-0940, which used the open-source Artex agentic AI framework to automate credential attacks, abuse trusted cloud applications and attempt access to more than 2,250 customer tenants at machine speed. First seen on govinfosecurity.com Jump to article:…
-
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Tags: ai, attack, backup, breach, china, cloud, credentials, exploit, framework, group, microsoft, open-source, penetration-testing, supply-chain, toolChina-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks…
-
Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
A Chinese government-aligned hacking group used automated tools to carry out the recent supply chain attack on IT management software company ConnectWise and is using the same techniques to try to compromise organizations around the globe, Microsoft said. First seen on therecord.media Jump to article: therecord.media/china-cyber-connectwise-ai
-
LiteLLM hit by second supply chain attack this year, users urged to rotate credentials
A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/
-
LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks
Tags: ai, attack, authentication, cloud, container, credentials, cyber, malicious, malware, pypi, startup, supply-chainLiteLLM version 1.107.0 was compromised in a supply chain attack that distributed credential-stealing malware through PyPI wheels and container images. On October 21, 2026, researchers at Socket reported that malicious Python startup hooks could activate even if applications didn’t import LiteLLM, potentially exposing cloud credentials, developer secrets, and AI authentication files. Socket flagged seven malicious…
-
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application.During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning…
-
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/