Tag: supply chain
1740 articles
Russian Hackers Breach Polish Power Plant via Private APN
In a chilling cyberattack, Russian hackers infiltrated a Polish power plant by breaching a wind farm's VPN and firewall, then exploited a cellular router to gain control of the plant's systems. The attackers forced a combined heat and power plant into a controlled shutdown, overriding its operations with a password-protected lock.
Malicious LiteLLM Releases Expose Over 2,100 Organizations to Credential Theft
Over 2,100 organizations are at risk of credential theft due to malicious LiteLLM releases that harvested sensitive data, including environment variables, SSH keys, and cloud credentials, and sent it to an attacker-controlled domain. These compromised packages were live on PyPI for about 40 minutes on March 24, leaving a trail of potential exposure.
SAP Patches Critical Flaw Allowing Unauthenticated Code Execution
A critical flaw in SAP Commerce Cloud, rated 10.0 on the CVSS scale, allows hackers to execute malicious code without any authentication, putting your entire system at risk. This severe vulnerability can be exploited with specially crafted input, making it essential to patch ASAP.
DeadLock Ransomware Leverages Blockchain to Evade Takedown
DeadLock Ransomware is taking a disturbingly clever approach to evade shutdown by leveraging the Polygon blockchain to conceal its operational addresses, making it a formidable foe for cybersecurity efforts. By cleverly using decentralized building blocks, the group has already amassed a shocking 80 victims, mostly in Europe.
Sandworm Hackers Exploit VPN Client in IT Pro Targeting Scam
Beware of fake job interviews! Cyber attackers, linked to the notorious Sandworm group, are targeting IT pros with bogus job offers, tricking them into installing a malicious VPN client to gain access to sensitive info.
Microsoft Patches Zero-Day Windows Driver Flaw Under Active Attack
Microsoft just patched a high-severity Windows driver flaw, known as CVE-2026-68820, that was already being exploited by hackers in the wild. This zero-day vulnerability, with a CVSS score of 7.0, could be triggered by a race condition, allowing attackers to gain a foothold in targeted systems.
US Abruptly Halts Voting System Security Review
The government's sudden halt of a voting system security review has left experts stunned, with the CEO of Mojave Research, Jason Wareham, calling it one of the worst decisions of his life. The six-week federal engagement, which had grown to involve around 60 people, was abruptly shut down just as the team was set to press forward.
Joby Expands Defense Ambitions with $500 Million Resonant Sciences Buy
Joby Aviation is bolstering its defense ambitions with a $500 million acquisition of Resonant Sciences, a military-technology firm that brings cutting-edge tech and trusted customer relationships to the table. The deal, expected to close in the first half of 2027, will make Resonant Sciences Joby's new defense business.
Water Utilities Fortify Defenses Against Rising Cyber Threats
The Water Watch Center, a game-changing partnership between the National Rural Water Association and DEF CON Franklin, is revolutionizing cyber defense for small water systems by providing targeted support against rising threats. This innovative hub brings together top cyber firms to safeguard community water systems serving fewer than 10,000 people.
Head Mare APT Exploits Unpatched TrueConf Servers to Deliver PhantomCore Malware
In a sneaky move, the Head Mare group exploited unpatched TrueConf servers to spread PhantomCore malware, using a chain of vulnerabilities to swap out legitimate client installers with infected ones. This allowed them to secretly deliver a backdoor to unsuspecting meeting participants.
Delta Probes In-Flight Wi-Fi Spoofing Incident on Las Vegas Flight
Delta is cracking down on a sneaky passenger who tried to scam fellow travelers on a Las Vegas-to-Atlanta flight by setting up a fake in-flight WiFi hotspot called "Delta WiFi Fast". The incident caused a delay, and authorities were called in once the plane landed.
DeadLock Ransomware Exploits Polygon Smart Contracts
DeadLock Ransomware takes a sophisticated approach by leveraging the Session messaging network and blockchain-backed services to streamline its extortion process, making it harder for victims to recover. Its operators use a clever combination of decentralized chat and a self-contained HTML app to communicate with victims and demand payment in Bitcoin or Monero.
Wesco Probes Data Exfiltration After ExfilSquad Leak Claim
Wesco is investigating a cybersecurity incident involving its cloud CRM environment after a third-party group, ExfilSquad, claimed to have exfiltrated company data. The company says it has contained the issue, found no evidence of sensitive data being compromised, and continues to operate as usual.
Cursor Security Flaw Enables Pre-Trust Command Execution
A security flaw in Cursor allowed hackers to run malicious commands on a developer's machine before they even had a chance to trust the repository, thanks to a vulnerability in its isolated worktree feature. Fortunately, a fix was swiftly rolled out just three days after Manifold Security reported the issue on July 20.
Malware Packages Exploit Ethereum for C2 Communications
Malicious actors have cleverly exploited Ethereum to spread malware, with six suspicious npm packages found querying an attacker-controlled wallet to fetch additional malicious payloads. This sneaky tactic was uncovered by Sonatype Research Labs on August 10, revealing a new level of sophistication in cyber attacks.
Mozilla Revokes Firefox GPG Key After Accidental Exposure
Mozilla swiftly responded to a security slip-up by revoking a Firefox GPG key after it was accidentally exposed in a private GitHub repository, and has since transitioned to a new key to ensure the integrity of its software. The move aims to prevent potential misuse and protect users, with measures also put in place to avoid similar incidents in the future.
Researchers Expose North Korean IT Hiring Ploy
Security researchers pulled off a clever experiment, creating a fake DeFi startup and hiring three suspected North Korean IT operatives to uncover the tactics used to secretly place foreign workers in companies, and were surprised to find that none exploited their access. The operatives cleared interviews, signed contracts, and were given access to a work virtual machine, but instead of breaching security, they seemed to be gathering intel.
Ransomware gangs exploit Microsoft SharePoint flaw
Ransomware gangs are actively exploiting a high-severity Microsoft SharePoint flaw, known as CVE-2026-45659, that allows them to execute arbitrary code on unpatched servers, and it's crucial to patch up ASAP to avoid falling victim. Microsoft has already released security updates for affected SharePoint versions, so make sure to get those installed pronto!
US Local Governments Targeted in Wave of Cyber Attacks
Local governments are under siege, with a growing wave of cyber attacks crippling their operations - just like Suisun City, which was forced to declare a state of emergency after a malicious software attack shut down its entire IT network. The attacks are leaving communities vulnerable, with city services and internal operations grinding to a halt.
Gunra Ransomware Targets Infrastructure with Fortinet, Schneider Electric Exploits
Gunra ransomware is on the loose, exploiting vulnerabilities in critical infrastructure from Fortinet and Schneider Electric to wreak havoc on organizations worldwide. This malicious campaign uses double-extortion tactics, combining data theft with file encryption to maximize damage.
Malicious Servers Exploit AI Coding Agents via MCP
Malicious servers are cleverly exploiting AI coding agents using a sneaky technique called GhostSplice, which breaks down secret-stealing instructions into harmless-sounding messages that the agents unwittingly combine. This allows hackers to leak sensitive information, like secret keys and proprietary data, in a way that's hard to detect.
Ceva Logistics Breach Exposes European Client Data
A data breach at Ceva Logistics has compromised sensitive information of European clients, affecting eight warehouses and disrupting contract logistics operations. The breach, described as a "textbook supply chain breach," was contained within European operations, with no impact on global systems.
UK Manufacturers Lag in Cyber Incident Response Planning
UK manufacturers are leaving themselves exposed, with almost a third having experienced a cyber incident in the past year, resulting in reduced production capacity, operational delays, and supply chain disruptions. The alarming reality is that many factories are flying blind, unable to see and respond to cyber threats.
Hackers Exploit Private APN to Breach Polish Energy Plant
In a groundbreaking cyberattack, hackers exploited a private APN to breach a Polish energy plant, marking the first observed instance of this attack vector in a real-world scenario. CERT Polska tracked the intrusion to a compromised FortiGate VPN/firewall at a wind farm, which served as a springboard for the attack.