Everything Threat Times has reported about Supply Chain Attack: 6 stories, newest first. Part of our Cyber Attacks coverage.
Security researchers report that budget Android devices from brands like Doogee and Cubot were shipped with preinstalled malware designed to generate fraudulent ad revenue.
The crypto wallet maker verified that tampered units distributed by a Southeast Asian reseller contained unauthorized implants that drained user funds.
Ledger states that a physical hardware implant found in devices sold by reseller CryptoBilis may be the root of the massive cryptocurrency heist.
The Shai-Hulud credential-stealing worm has expanded its reach to AI tools by hijacking the Tensorlake package on the npm registry.
The tensorlake TypeScript SDK was hijacked in a supply chain attack, with version 0.5.144 distributing malware that steals credentials and executes remote code.
Researchers reveal a campaign using stolen maintainer credentials to inject malicious GitHub Actions into hundreds of open-source repositories.