Malicious packages in open-source repositories are surging
The open-source ecosystem is being overrun by malicious packages, a new report from Sonatype finds.
Advertisement
supply chain
More frequent disruption operations needed to dent ransomware gangs, officials say
The comments from White House and ODNI officials ahead of a Counter Ransomware Initiative summit come as the gangs prove difficult to keep down.
White House proposes rule to ban Chinese, Russian parts for networked vehicles
The ban for hardware and software could happen within three to seven years.
Deterrence in cyberspace is possible — and ‘urgent’ — amid ‘alarming’ hybrid attacks, State cyber ambassador says
In an interview with CyberScoop, Nate Fick also discussed the structure of his office and regions of emphasis.
AT&T agrees to $13 million fine for third-party cloud breach
The breach resulted in the theft of information related to more than 8.9 million AT&T Mobility customers.
Zero trust: How the ‘Jia Tan’ hack complicated open-source software
The volunteers that maintain open-source software have always been knocked around by the tech community. The Jia Tan hack made it all so much worse.
Advertisement
ONCD report: ‘Fundamental transformation’ in cyber, tech drove 2023 risks
Evolving critical infrastructure risks, ransomware, supply chain exploitation, commercial spyware and AI were the top trends, the office reported.
Rumman Chowdhury on AI red-teaming; a Sisense supply chain attack
Dr. Rumman Chowdhury, Data Scientist, Member of the AI Safety and Security Board for the U.S. Department of Homeland Security, US Science Envoy for AI for the…
Supply chain attack sends shockwaves through open-source community
An operation to undermine the software utility XZ Utils has exposed the fragile human foundations on which the modern internet is built.
3CX supply chain attack was the result of a previous supply chain attack, Mandiant says
The incident is the first known case of one supply chain attack leading to a second supply chain attack.