Supply Chain

Supply Chain | News, how-tos, features, reviews, and videos

Abandoned AWS S3 buckets open door to remote code execution, supply-chain compromises

Attackers re-register abandoned AWS S3 buckets filled with malicious files that are executed by applications looking for these buckets.

By Lucian Constantin

Feb 4, 2025 9 mins

Network Security Security Supply Chain

DNA sequencer vulnerabilities signal firmware issues across medical device industry

Eclypsium security researchers have uncovered UEFI vulnerabilities in the Illumina iSeq 100 DNA sequencer, but the broader issue involves the device development process at large.

By Lucian Constantin

Jan 8, 2025 7 mins

Healthcare Industry Supply Chain Vulnerabilities

12 cybersecurity resolutions for 2025

CISOs outline their goals for 2025, from leveraging AI for defense to ensuring swift recovery in the face of cyberattacks.

By Aimee Chanthadavong

Jan 6, 2025 9 mins

Identity and Access Management Supply Chain

Supply chain compromise of Ultralytics AI library results in trojanized versions

Attackers exploited a script injection vulnerability via GitHub Actions to inject malicious code during the automated build process, poisoning the resulting packages of the popular Python library.

By Lucian Constantin

Dec 6, 2024 4 mins

Libraries and Frameworks Malware Python

8 biggest cybersecurity threats manufacturers face

The manufacturing sector remains a prominent target for cybercriminals, due to complex supply chains, legacy industry control and IoT systems, and a lack of appetite for downtime.

By John Leyden

Dec 6, 2024 9 mins

Cyberattacks Manufacturing Industry Ransomware

Starbucks operations hit after ransomware attack on supply chain software vendor

Blue Yonder, a supply chain software provider for Starbucks and other retailers, confirmed service disruptions caused by a ransomware attack.

By Prasanth Aby Thomas

Nov 26, 2024 4 mins

Ransomware Security Supply Chain

Kicking dependency: Why cybersecurity needs a better model for handling OSS vulnerabilities

Most organizations are still immature when it comes to identifying open-source dependencies that can usher in a host of problems when dealing with vulnerabilities.

By Chris Hughes

Nov 6, 2024 11 mins

Security Software Supply Chain Threat and Vulnerability Management

US DoD finalizes CMMC cyber rules for suppliers

The Cybersecurity Maturity Model Certification (CMMC) is a US Department of Defense program outlining tough requirements for Defense Industrial Base contractors to ensure the protection of sensitive data. It is expected to take effect by year-end.

By John P. Mello Jr.

Oct 15, 2024 5 mins

Compliance Government IT Laws and Regulations

Software supply chain still dangerous despite a slew of efforts

While recent efforts promise a more secure future for software, experts say several challenges could still vex organizations as they try to improve software security.

By Cynthia Brumfield

Jul 10, 2024 10 mins

Cloud Security Security Practices Supply Chain

Software supply chain threats continue to plague CISOs

Malware-laced libraries add a new dimension to defending the software supply chain.

By David Strom

May 28, 2024 8 mins

Open Source Security Software Supply Chain