#supply-chain


Brevo supply-chain attack injected ClickFix scripts on customer sites

Sep 17, 2026 // 20:17

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on […]

Australia arrests alleged TeamPCP hackers behind supply-chain attacks

Aug 27, 2026 // 19:37

Australian authorities have arrested and charged two young men accused of being part of the TeamPCP hacking group linked to a string of far-reaching developer […]

BdThemes plugins supply-chain hack creates rogue WordPress admins

Aug 11, 2026 // 00:56

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ […]

BdThemes plugins supply-chain hack creates rogue WordPress admins

Aug 11, 2026 // 00:56

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators’ […]

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

Aug 10, 2026 // 18:40

A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting […]

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Aug 5, 2026 // 00:39

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include […]

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Aug 4, 2026 // 18:37

Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include […]

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Aug 4, 2026 // 00:39

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked […]

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Aug 3, 2026 // 18:38

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked […]

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Aug 3, 2026 // 18:18

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked […]

1 2 3 … 6 Next