DEV Community

# supplychainsecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT
snyk_sec profile
SnykSec for Snyk

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

#supplychainsecurity
Comments
9 min read
The Vulnerability Scanner That Became the Vulnerability
peternasarah profile

The Vulnerability Scanner That Became the Vulnerability

#cybersecurity #devsecops #opensource #supplychainsecurity
1
Comments 1
2 min read
18,883 MCP servers. Five Chinese tech giants joined this week. Zero security audits.
n_asuy profile

18,883 MCP servers. Five Chinese tech giants joined this week. Zero security audits.

#ai #security #mcp #supplychainsecurity
7
Comments
3 min read
Supermicro GPU Smuggling: What the Indictment Reveals
simon_paxton profile

Supermicro GPU Smuggling: What the Indictment Reveals

#semiconductorindustry #supplychainsecurity #exportcontrols #aihardware
Comments
7 min read
Agent.BTZ — how one USB stick rewrote modern cyber defence
helixcipher profile

Agent.BTZ — how one USB stick rewrote modern cyber defence

#cybersecurity #supplychainsecurity #airgap #malware
1
Comments
2 min read
How to Detect and Recover From a Compromised Container Scanner
alanwest profile

How to Detect and Recover From a Compromised Container Scanner

#security #containers #devops #supplychainsecurity
Comments
5 min read
Should RubyGems/Bundler Have a Cooldown Feature?
hsbt profile

Should RubyGems/Bundler Have a Cooldown Feature?

#ruby #security #supplychainsecurity #packaging
60
Comments 5
4 min read
How “Clinejection” Turned an AI Bot into a Supply Chain Attack
snyk_sec profile
SnykSec for Snyk

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

#ai #vulnerabilityinsights #supplychainsecurity #opensourcesecurity
Comments
11 min read
The Fragility of Modern DevOps: A 2026 CI/CD Exposure Report
eldor_zufarov_1966 profile

The Fragility of Modern DevOps: A 2026 CI/CD Exposure Report

#devsecops #cybersecurity #zerotrust #supplychainsecurity
Comments
3 min read
How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware
snyk_sec profile
SnykSec for Snyk

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

#ai #opensourcesecurity #securitylabs #supplychainsecurity
5
Comments
6 min read
Exploitability Isn’t the Answer. Breakability Is.
snyk_sec profile
SnykSec for Snyk

Exploitability Isn’t the Answer. Breakability Is.

#supplychainsecurity #vulnerabilityinsights #javascript #node
Comments
5 min read
When browser extensions become live surveillance
helixcipher profile

When browser extensions become live surveillance

#mlsecurity #browsersecurity #supplychainsecurity #privacy
2
Comments 1
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.