Topic

#Supply Chain

5 posts tagged “Supply Chain”.

Chisato Chisato · · 6 min read

JFrog Artifactory CVE-2026-82329: Critical Auth Bypass

Attackers are exploiting CVE-2026-82329, a CVSS 9.8 auth bypass in self-hosted JFrog Artifactory, to mint admin tokens. Affected versions, fixes, mitigations.

#Security #Cybersecurity #Supply Chain
Chisato Chisato · · 5 min read

Rust arrayref Supply Chain Attack: What Happened

A compromised account poisoned Rust crates arrayref, internment, and append-only-vec with a build-time payload. The attack, the mechanism, and how to respond.

#Security #Rust #Supply Chain
Chisato Chisato · · 6 min read

npm Slopsquatting Attack: 1,000+ Malicious Packages

A Russian-linked campaign named WEL1DROPPER flooded npm with 1,000+ slopsquatted packages that drop a cross-platform RAT. How the attack works and how to defend.

#Security #Supply Chain #npm
Chisato Chisato · · 5 min read

Ernst & Young Data Breach: Client Tax Data Exposed

EY disclosed a breach after attackers accessed a third-party IT support platform and downloaded client tax documents. What happened, what leaked, and what to do.

#Security #Data Breach #Supply Chain
Chisato Chisato · · 4 min read

ChocoPoC Malware Hides in Fake GitHub Exploit Code

A trojan called ChocoPoC hides in fake PoC exploit repos on GitHub, stealing browser passwords and cookies from security researchers. How the attack works.

#Security #Supply Chain #Malware

← All topics