Topic
Supply Chain
13 stories about Supply Chain that passed the news check, newest first.
Business ·
TSMC Mulls Making Advanced AI Memory Chips, Information Says
TSMC is considering expanding into manufacturing 3D DRAM, according to sources cited by The Information.
Bloomberg Technology · 2 sources
Security ·
A Fake Claude Code Extension Tried to Open a Backdoor to Your PC
A fake Claude Code extension attempted to open a backdoor on users' PCs.
Real Python
Release ·
GitHub Actions Lockfiles Reach GA to Secure Workflow Dependencies
GitHub made workflow dependency lockfiles for GitHub Actions generally available on October 28, 2026.
InfoQ
Security · High impact ·
Even gem list can run someone else's code
Ruby gems can run code during installation and on every gem command, including gem list.
Aikido Security's Blog
Security · High impact ·
Harden cooling systems now, feds warn critical infrastructure operators amid attacks
US government agencies, including CISA and the FBI, issued a joint advisory warning that attackers are targeting refrigeration and cooling controllers.
The Record from Recorded Future News · 6 sources
Policy ·
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub will begin blocking GitHub Actions workflows triggered by pull_request_target in public repositories on December 2, 2026.
Socket
Security · High impact ·
CVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root
CVE-2026-109518 is a flaw in apt that lets attackers swap packages after they have been verified.
Step Security Blog
Security · High impact ·
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
CERT-In says the AI-assisted threat actor Crafty Falcon is targeting banking, financial services and insurance organizations in India.
The Hacker News · 3 sources
Security ·
Want to Rent an Internet Address at the White House?
Layer3 Intel found 28 residential proxy services using 6 IP addresses on the White House network over one month.
Krebs on Security · 4 sources
Security · High impact ·
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
Six Asian airlines, including Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines, have reported data breaches in the past week.
The Record from Recorded Future News · 2 sources
Security · High impact ·
NIKKE PC game launcher hacked to spread remote access, data-stealing malware
Developers of Goddess of Victory: NIKKE confirmed hackers tampered with the PC game launcher scripts in a supply-chain attack.
BleepingComputer
Security ·
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Researchers disclosed an OpenAI Codex jailbreak bundle that modifies an AI agent's trusted instructions to insert advertisements for a third-party AI gateway.
The Hacker News
Security · High impact ·
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
A Russia-linked group, presumed to be APT29, runs a large-scale watering hole campaign targeting iOS and Android users via compromised websites, fake domains and a supply-chain attack on a Ukrainian web analytics script (Plerdy SEO Tracker).
The Hacker News · 8 sources