Tag: supply chain
Binance lost $6.3B after an engineer’s laptop was compromised
Researchers attribute the largest crypto theft on record to North Korea, with about $3B frozen on-chain and the exchange promising…
A reseller’s Trezor shipped with an extra board and a radio
Trezor is warning CryptoBilis buyers to build a fresh wallet after a customer found a second circuit board that reads…
Turning off remote code trust does not save Unsloth users
A model-type string reaches exec() in a flaw rated 8.6, so a trusted-looking config can run attacker code.
Stolen GitHub tokens are printing private repo secrets into build logs
Wiz traced 13,500 rogue branches across 850 compromised GitHub accounts, each planted with a workflow that encodes repository secrets into…
Cyber claims shrink in number while the big ones double in size
NAIC data shows large-company cyber claims averaging $4.4M in 2025, double the prior year, even as claim frequency fell.
Stolen UpdraftCentral keys became a WordPress plugin factory
Remote-management credentials lifted from TeamUpdraft let attackers push malicious plugins onto connected sites, and revoking the key does not undo…
Rank Math PRO backdoor rebuilt itself after each update
Rank Math PRO's poisoned builds regrow their backdoor, so deleting the plugin is only the first of three steps.
ConnectWise kills cloud backups after seven app identities were hijacked
The vendor revoked certificates and stopped scheduled backups after intruders used stolen application credentials to reach customer Microsoft 365 tenants.