Tag: supply chain
1739 articles
Ivanti Discloses Zero-Day Exploits in Connect Secure
Ivanti has sounded the alarm on zero-day exploits targeting its Connect Secure software, warning that a limited number of customers have already been affected. The company has released urgent updates to patch the vulnerabilities and is urging customers to act fast to avoid falling prey to these attacks.
Ledger Halts Asia Sales After Supply-Chain Attack Compromises Wallets
Trezor is stepping up its game to protect users, implementing a stricter legal framework and tighter checks on device sourcing, storage, and handling. Ledger, meanwhile, is warning users to be vigilant after discovering that devices sold by a Southeast Asian reseller had been compromised, allowing thieves to steal cryptocurrency recovery phrases.
Hackers Exploit Refrigeration Systems in 700+ Retailers
Cyberattacks on retailers just got a whole lot chillier - literally, as hackers exploited refrigeration systems in over 700 stores, causing food spoilage, fires, and massive losses. By breaching outdated software, attackers remotely cranked up temperatures to as high as 122°F, leaving a trail of destruction in their wake.
Forescout Researchers Expose ROMULUS Malware Server Leveraging ClickFix
Forescout researchers have uncovered a cunning malware server, dubbed ROMULUS, that's linked to a notorious campaign called ClickFix, and what's alarming is that it can deliver multiple payloads. This discovery was made by Vedere Labs, part of Forescout Research, who identified six servers running the ROMULUS platform.
Law Enforcement Disrupts Phishing Network Behind 1 Billion Malicious Messages
A massive phishing network responsible for sending over 1 billion malicious messages to 75,000 organizations in 150 countries has been disrupted by law enforcement, bringing relief to countless individuals and businesses worldwide. This enormous operation had been targeting victims with sophisticated device-code phishing scams, with over 750 million messages aimed specifically at Microsoft customers.
Curl Fixes Flaw That Exposes Clients to Code Execution
A subtle bug in curl's HTTP/2 upload sequence could let malicious servers corrupt memory on machines running the curl client and libcurl library, potentially leading to code execution - but thankfully, a fix was swiftly rolled out in curl 8.23.0 on October 14. The vulnerability, tracked as CVE-2026-92392, affects curl releases 8.12.0 through 8.22.0.
Hirudo Malware Disrupts Banking Apps with Advanced Evasion Tactics
This sneaky malware outsmarts banking apps by hijacking their own defenses, essentially turning their security against them. By cleverly replacing legitimate apps with malicious versions, Hirudo malware intercepts sensitive info, putting victims' financial data at risk.
Cyber-Attack Targets French Supermarket Refrigeration Controllers
A cyber-attack on French supermarkets' refrigeration controllers has caused food stock disruptions, with hackers altering freezer settings at an alarming rate - in one case, even changing temperatures from -22°C to 150°C. This critical breach has raised concerns about the preservation of food products and the security of essential systems.
Ivanti Zero-Day Exploited Before Patch Release
Ivanti's internal discovery of a zero-day vulnerability in June didn't stop attackers from exploiting it in the wild by October 1, highlighting a disturbing gap in patch protection. Researchers uncovered a chain of three zero-day flaws being used to breach Ivanti Connect Secure authentication and execute remote code.
Third-Party Risk Exposes Bank to Months-Long Cyberespionage Intrusion
A single misstep with a third-party vendor can have devastating consequences, as seen in a recent cyberespionage case where a European bank fell victim to a months-long intrusion through a poorly configured gateway. The attacker's sloppy tactics, including a noisy reconnaissance campaign, ultimately led to their discovery by Unit 42.
Ransomware Attacks Target Victims' Families
Imagine receiving a mysterious package on your doorstep, complete with creepy nesting dolls and regional souvenirs, just because you're investigating a cyberattack - it's a chilling reminder that ransomware attackers will stop at nothing to intimidate their victims. This kind of personal intimidation is just one tactic used by groups like Russia's Midnight Blizzard to terrorize not just their targets, but their families too.
BAE's APKWS Disrupts Low-Cost Drone Threats with Precision Strikes
BAE Systems has reached a major milestone with the delivery of its 100,000th APKWS guidance kit, a testament to the system's effectiveness in taking down low-cost drone threats with precision. With a production capacity of 25,000 kits per year and a $1.7 billion Navy contract, BAE is poised to meet growing demand for counter-UAS interceptors.
SAP Cloud SDK Flaw Exposes OAuth2 Credentials to Theft
A critical flaw in SAP's Cloud SDK for Python, rated a perfect 10.0 on the CVSS scale, can be exploited to steal sensitive OAuth2 credentials, putting applications that rely on it at risk. This vulnerability allows attackers to intercept client IDs and secrets, giving them unauthorized access to sensitive data.
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.
Docker Fixes Flaw That Let Users Push Images as Others on Hub
Docker patched a critical security flaw that allowed users to push images as others on Docker Hub, exposing a vulnerability that went undetected for over two years. The bug, logged as CVE-2026-105445, had a near-perfect CVSS 4.0 score of 9.4, highlighting the severity of the issue.
UK Housing Ombudsman Probes Third-Party IT Breach
The UK Housing Ombudsman Service has launched an investigation into a third-party IT security breach that affected its case management system, and is working closely with the supplier to assess the impact and restore services as quickly as possible. The watchdog is also racing to determine if any personal information was compromised.
GitHub Bolsters npm Security After Loophole Exposes 1,500 Packages to Hijacking
GitHub has stepped up npm security measures after a loophole was discovered, exposing over 1,500 packages to hijacking - with a whopping 10 million downloads between them. To prevent future breaches, GitHub now requires a 48-hour validation window for trusted publishing.
Ivanti Discloses Zero-Day Exploited in Targeted Attacks
A high-severity zero-day vulnerability in Ivanti Connect Secure appliances is being exploited in targeted attacks, allowing remote attackers to execute arbitrary commands without user interaction. This authentication bypass flaw, tracked as CVE-2026-104935, affects several ICS versions and requires immediate patching and mitigation.
Docker Hub vulnerability exposes user impersonation risk
A critical vulnerability in Docker Hub, known as CVE-2026-105445, allowed attackers to impersonate users by exploiting a loophole in personal access token handling, putting user accounts at risk of being compromised. This flaw enabled malicious actors to convert a personal account into an organization, reassigning the token to another user without their consent.
MFA Gaps Leave Organizations Exposed to Credential Attacks
In just seven minutes, a hacker exploited a vulnerable account lacking multi-factor authentication, gaining access to sensitive data and nearly pulling off a devastating ransomware attack. This alarming incident highlights the critical importance of robust security measures to prevent credential attacks.
SAP Discloses Maximum-Severity OAuth2 SSRF Flaw in Cloud SDK
SAP has patched a critical OAuth2 vulnerability in its Cloud SDK for Python, which could allow attackers to steal sensitive credentials by redirecting token requests to a server of their choice. This flaw, tracked as CVE-2026-89111, poses a major threat to multi-tenant BTP applications.
Cyber Incidents Disrupt European Retail Operations
Ahold Delhaize took swift action to protect its systems, taking some offline after detecting a security issue that impacted three of its popular brands: Albert Heijn, Etos, and Gall & Gall. The move comes as the company works to contain and resolve the disruption.
Weak Password Exploited in Denmark's 8.8M Person Data Breach
A weak password, astonishingly "123456", was exploited by hackers to breach Denmark's Central Register of Persons, compromising sensitive data of 8.8 million people. This massive breach highlights the alarming vulnerability of even seemingly secure systems to simple yet devastating cyber attacks.
French Supermarkets Hit by Cyberattacks on Refrigeration Systems
French supermarkets are reeling from a wave of devastating cyberattacks that crippled their refrigeration systems, causing temperatures to soar as high as 122°F and spoiling food across hundreds of stores. The disruption hit major chains like Intermarché, Carrefour, Monoprix, and Coopérative U, with some stores even reporting fires.