Tag: supply-chain
-
Key strategies to enhance cyber resilience
Tags: attack, awareness, backup, banking, breach, business, ceo, compliance, control, crowdstrike, cyber, cybersecurity, data, finance, government, group, healthcare, incident, incident response, infrastructure, insurance, metric, network, phishing, programming, ransom, ransomware, resilience, risk, security-incident, service, skills, software, strategy, supply-chain, technology, threat, training, update, vulnerability, windowsThe faulty CrowdStrike software update that triggered IT outages on a global scale in July was a sobering reminder of the importance of incident response and business continuity plans.The update caused more than eight million Windows devices to crash and take down with them airline reservation systems, hospital and government services, financial and banking applications…
-
Sonar Expands to Third-Party Code Security with Tidelift Buy
Deal Targets Open Source Library Risks in Software Supply Chain, Boosts DevSecOps. The integration of Tidelift into Sonar’s ecosystem will enhance software supply chain security by leveraging human-verified insights from maintainers of popular open source libraries. Developers can expect comprehensive tools to address vulnerabilities in first-party, AI-generated, and third-party code. First seen on govinfosecurity.com Jump…
-
Harnessing Threat Intel and Automation to Counter Supply Chain Risks
First seen on scworld.com Jump to article: www.scworld.com/perspective/harnessing-threat-intel-and-automation-to-counter-supply-chain-risks
-
All Major European Financial Firms Suffer Supplier Breaches
SecurityScorecard claims 100% of Europe’s top financial services companies have suffered a supply chain breach in the past year First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/all-europes-top-financial-firms/
-
390,000 WordPress accounts stolen from hackers in supply chain attack
A threat actor tracked as MUT-1244 has stolen over 390,000 WordPress credentials in a large-scale, year-long campaign targeting other threat actors using a trojanized WordPress credentials checker. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/390-000-wordpress-accounts-stolen-from-hackers-in-supply-chain-attack/
-
Sinkendes Sicherheitsniveau und verschärfte Rahmenbedingungen belasten Developer
Tags: supply-chainDer neue Snyk-Report zeigt: Wachsende Anforderungen und unzureichende Supply-Chain-Sicherheit überfordern Teams. Dennoch sind OSS-Projekte im Vorteil. First seen on heise.de Jump to article: www.heise.de/news/Sinkendes-Sicherheitsniveau-und-verschaerfte-Rahmenbedingungen-belasten-Developer-10198335.html
-
Time of Reckoning Reviewing My 2024 Cybersecurity Predictions
Tags: ai, attack, automation, awareness, breach, business, chatgpt, china, compliance, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, disinformation, election, espionage, exploit, healthcare, incident response, infrastructure, jobs, law, linkedin, malware, monitoring, moveIT, phishing, privacy, ransomware, regulation, risk, russia, service, software, supply-chain, technology, threat, tool, ukraine, update, vulnerability, warfare, zero-dayThe brutal reality is that cybersecurity predictions are only as valuable as their accuracy. As 2024 comes to a close, I revisit my forecasts to assess their utility in guiding meaningful decisions. Anyone can make predictions (and far too many do), but actually being correct is another matter altogether. It is commonplace for security companies…
-
Yearlong supply-chain attack targeting security pros steals 390K credentials
Multifaceted, high-precision campaign targets malicious and benevolent hackers alike. First seen on arstechnica.com Jump to article: arstechnica.com/security/2024/12/yearlong-supply-chain-attack-targeting-security-pros-steals-390k-credentials/
-
Cyberint’s 2024 Report Highlights Surge in Credential Theft and Rise of AI-Powered Phishing
Cyberint, a Check Point company, has released its 2024 Cyber Security Landscape Report, painting a concerning picture of the evolving threat landscape. The report, drawing on data from the Cyberint Argos Platform, analysed 140,000 cyber threat alerts across critical industries, revealing a 333% surge in credential theft, a significant rise in supply chain attacks, and…
-
Ultralytics Supply-Chain Attack
Last week, we saw a supply-chain attack against the Ultralytics AI library on GitHub. A quick summary: On December 4, a malicious version 8.3.41 of the popular AI library ultralytics ”, which has almost 60 million downloads”, was published to the Python Package Index (PyPI) package repository. The package contained downloader code that was downloading…
-
KI-gestützte Bedrohungen und Schwachstellen in der Lieferkette dominieren Europas Bedrohungslandschaft
Cyberint, ein Unternehmen von Check Point, stellt in neuestem Bericht einen Anstieg von 333 Prozent bei Datendiebstählen fest und warnt vor KI-getriebener Ransomware. Cyberint, jetzt Check Point External Risk Management, hat in seinem Bericht alarmierende Erkenntnisse veröffentlicht, welche die rasante Entwicklung von Cyber-Bedrohungen behandeln. Der Bericht zeigt einen Anstieg des […] First seen on netzpalaver.de…
-
KI-gestützte Bedrohungen und Schwachstellen in der Lieferkette dominieren in Europa
Der Bericht ‘Europe Threat Landscape Report 2024-2025″ bietet Organisationen ein hilfreiches Framework, um sich in der Cyber-Bedrohungslandschaft zurechtzufinden und auf die bevorstehenden Herausforderungen vorbereiten zu können. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-gestuetzte-bedrohungen-und-schwachstellen-in-der-lieferkette-dominieren-in-europa/a39257/
-
IT pros say hackers could compromise device supply chain, firmware security
First seen on scworld.com Jump to article: www.scworld.com/news/it-pros-say-hackers-could-compromise-device-supply-chain-firmware-security
-
Checkmarx CEO: Evolving Supply Chain Threats Demand Action
Checkmarx’s Sandeep Johri Details Malicious Code, AI Risks in Application Security. As software complexities grow, supply chain security is now essential to application security, according to Sandeep Johri, Checkmarx CEO. Johri discusses the challenges of malicious code, adversarial AI and the market’s call for consolidated security platforms. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/checkmarx-ceo-evolving-supply-chain-threats-demand-action-a-27040
-
Cardiac surgery device manufacturer falls prey to ransomware
Tags: attack, breach, business, cyber, cyberattack, cybercrime, data, group, hacker, healthcare, ransom, ransomware, service, supply-chainThe healthcare industry has been increasingly in the crosshairs of cyberattackers this year, with ransomware near the top of the sector’s biggest cyber threats. Hackers are attacking IT systems and personal data, among other things, with the aim of manipulation or theft. But it’s not just hospitals that are affected by cyberattacks; their suppliers are under attack as well.…
-
Containers have 600+ vulnerabilities on average
Containers are the fastest growing and weakest cybersecurity link in software supply chains, according to NetRise. Companies are struggling to get container … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/11/containers-security-concerns/
-
Lessons From the Largest Software Supply Chain Incidents
The software supply chain is a growing target, and organizations need to take special care to safeguard it. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/lessons-largest-software-supply-chain-incidents
-
Blue Yonder investigating data leak claim following ransomware attack
The software supply chain company is widening its investigation after Termite ransomware leaked data it claims is linked to the attack. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/blue-yonder-data-leak-ransomware/734987/
-
Sprawling ‘Operation Digital Eye’ Attack Targets European IT Orgs
A Chinese threat actor infiltrated several IT and security companies in a bring-your-own VS code, with an eye to carrying out a supply-chain-based espionage attack. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/operation-digital-eye-attack-targets-european-it-orgs
-
Moody’s: Hackers Aim for Big Payouts, Supply Chain Attacks
Big Game Hunting Will Intensify in 2025, Says Credit Rating Agency. Improved cybersecurity will result in ransomware hackers targeting larger organizations to wring out high dollar extortion payments and intensified focus on supply chain attacks, predicts Moody’s Ratings. The share of ransomware victims willing to meet criminal demands for money is at record lows. First…
-
Supply chain attack compromises Ultralytics AI model
First seen on scworld.com Jump to article: www.scworld.com/brief/supply-chain-attack-compromises-ultralytics-ai-model
-
Update your OpenWrt router! Security issue made supply chain attack possible
A security issue that could have allowed attackers to serve malicious firmware images to users has been fixed by OpenWrt Project, the organization that helms the development … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/09/openwrt-security-update-supply-chain-attack/
-
35 more Semgrep rules: infrastructure, supply chain, and Ruby
By Matt Schwager and Travis Peters We are publishing another set of custom Semgrep rules, bringing our total number of public rules to 115. This blog post will briefly cover the new rules, then explore two Semgrep features in depth: regex mode (especially how it compares against generic mode), and HCL language support for technologies……
-
OpenWrt orders router firmware updates after supply chain attack scare
A couple of bugs lead to a potentially bad time First seen on theregister.com Jump to article: www.theregister.com/2024/12/09/openwrt_firmware_vulnerabilities/
-
Ultralytics AI Library with 60M Downloads Compromised for Cryptomining
Another day, another supply chain attack! First seen on hackread.com Jump to article: hackread.com/ultralytics-ai-library-compromised-for-cryptomining/
-
Ultralytics YOLO AI model compromised in supply chain attack
While Ultralytics has not released an official security advisory, the company pulled two recent versions of its YOLO11 AI model after reports emerged that they contained a cryptominer. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366616877/Ultralytics-YOLO-AI-model-compromised-in-supply-chain-attack