Topic

#supply-chain-attacks

3 articles found

Glassworm botnet dismantled following effective C2 infrastructure crackdown

The Glassworm botnet targeting developers in software supply-chain attacks has been disrupted after researchers took down its resilient command-and-control infrastructure relying on Solana blockchain transactions and the BitTorrent DHT network. [...]

#botnet#cybersecurity#supply-chain-attacks#blockchain#malware

· 3 days ago· SecurityWeek

AI Assistants Hijacked to Deliver Stealthy Supply Chain Attacks

Malicious repositories and disguised symlinks can trick AI coding agents into silently installing attacker-controlled MCP servers capable of stealing secrets, compromising CI pipelines, and deploying malicious code. The post ‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery S

#ai-security#supply-chain-attacks#malware#cybersecurity#ai-coding

· 5 days ago· SecurityWeek

Megalodon Malware Targets Over 5,500 GitHub Repositories in Devastating Supply Chain Hit

Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens. The post Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack appeared first on SecurityWeek.

#supply-chain-attacks#github-security#malware#credentials-theft#cybersecurity