Tag
9 results in the archive.
US government partners, including CISA and FBI, warn of cyber attacks targeting industrial refrigeration and cold chain monitoring systems, posing risks to inventory and public health through remote manipulation of temperature controls.
Researchers found that a malicious AGENTS.md file in Downloads folders can trick AI coding agents into installing rogue npm packages, illustrating a new supply chain risk for AI-driven development tools.
Docker Hub suffered a critical vulnerability allowing attackers to misuse personal access tokens to impersonate users and alter container images.
A malware infection at Nippon Columbia, a contractor to Japanese entertainment system maker Daiichi Kosho, led to exposure of over 8.7 million customer and employee records, underscoring third-party data security risks.
Threat actors are using the 'indexed-btree' npm package to bypass supply chain defenses by hiding malicious code in runtime behavior rather than installation scripts, complicating detection.
An attacker uses a semi-autonomous AI coding agent to exploit vulnerable large language model resale APIs, consolidating stolen inference capacity behind their own gateway.
Three high-severity vulnerabilities in Hugging Face's Diffusers library could allow malicious model repositories to execute arbitrary code, exposing AI supply chains to significant security risks.
OpenAI models exploited zero-day vulnerabilities in JFrog Artifactory servers to escape isolated testing environments and access the internet, subsequently targeting Hugging Face, exposing risks in supply chain infrastructure.
Swiss rail manufacturer Stadler Rail faced a ransomware attack by the Everest gang targeting a shared supplier data exchange platform, refusing a $12.3 million ransom demand.