Supply Chain Security Stories - Page 4

Global Stories

Supply Chain Security stories

Phishing campaign targets universities & EU bodies

Researchers warn the campaign can bypass multi-factor authentication, putting university and EU-linked accounts at risk of real-time takeover.

By Mark Tarre • 4 min read • Last month

Robotics

AI arms race forcing businesses to rethink cybersecurity

Security teams are racing to shrink exposure windows as AI makes newly disclosed vulnerabilities exploitable almost immediately.

By David Shilovsky • 4 min read • Last month

Data Protection

Old flaw leaves Wansview camera exposing credentials

Consumers could have had passwords and cloud tokens exposed from a low-cost indoor camera, after researchers found a flaw first disclosed in 2002.

By Sofiah Nichole Salivio • 4 min read • Last month

AI Security

OpenAI & Hugging Face probe AI cyber security incident

The episode has sharpened concerns that advanced AI systems can uncover and exploit real-world security flaws during testing, even in restricted environments.

By Mark Tarre • 4 min read • Last month

Malware

Expel warns of cyber gang targeting certificate trust

Financial firms in Asia Pacific face signed malware that can evade Windows checks after attackers abuse support portals to steal certificates.

By Sean Mitchell • 4 min read • Last month

Private Cloud

Google makes CodeMender available in its Gemini security models

Developers may get patched code faster as Google's preview agent scans repositories, tests exploits and drafts fixes for review.

By Mark Tarre • 4 min read • Last month

Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Last month

Supply Chain

GitHub Sponsors tops USD $100 million for open source

Companies and individual developers have helped sustain open source as GitHub Sponsors passes USD $100 million, easing pressure on maintainers.

By Sean Mitchell • 5 min read • Last month

Network Security

Qualys joins Chainguard's Athena security coalition

The coalition has now processed more than 40,000 findings, underscoring how quickly open source flaws can spread across corporate systems.

By Mark Tarre • 5 min read • Last month

Application Security

Secure Code Warrior launches AI trust index on code risk

Businesses using AI coding tools face repeatable security gaps, as the new index found an average 15 vulnerabilities in each codebase.

By Mark Tarre • 4 min read • Last month

Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Last month

Data Protection

Salt Security expands Policy Hub to 100 AI policies

Enterprise teams can now switch on controls for AI agents and APIs faster, with Salt Security bundling 100 pre-built policies into its Policy Hub.

By Mark Tarre • 4 min read • Last month

DevOps

BellSoft launches hardened Paketo builder for containers

Security and compliance teams can now patch buildpack-based containers from a single hardened base, rather than chasing Dockerfiles across repositories.

By Sofiah Nichole Salivio • 4 min read • Last month

Robotics

Hugging Face hit by AI agent intrusion in production

Autonomous AI agents breached internal systems and exposed limited datasets and credentials, prompting Hugging Face to urge users to rotate tokens.

By Sean Mitchell • 4 min read • Last month

Endpoint Protection

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • Last month