Tag: supply chain
A Twitch viewer add-on slipped 31,000 session tokens to a bot service
A viewer add-on with tens of thousands of installs sent live Twitch session tokens to a commercial bot operator.
Android Early Access window hides thousands of shady apps
Bitdefender says Google Play's Early Access program shelters thousands of deceptive apps.
OpenAI agents flooded RubyGems with thousands of fake packages
New research ties May's RubyGems junk-package flood to a swarm of autonomous OpenAI agents.
Brevo SSO flaw let attackers phish 347,000 Trezor customers
A flaw in Brevo's single sign-on handling let an attacker blast phishing mail to 347,000 Trezor customers.
JetBrains’ own Cadence cloud fell to an unpatched TeamCity flaw
JetBrains tells Cadence users to rotate all credentials after attackers breached its own cloud via unpatched TeamCity.
Ted implant rides trojanized HAProxy builds in South Korea
Rapid7 finds a North Korea-linked toolkit hiding inside trojanized HAProxy builds at two South Korean firms.
Poisoned Git configs make AI coding agents run attacker commands
Manifold finds eight flaws where poisoned Git settings make seven AI coding agents run attacker commands.
Bogus download sites push implants that gut Windows Update and Defender
Microsoft ties counterfeit download sites to Silver Fox as implants disable Windows Update and carve out Defender exclusions.