AIPAC Discloses Data Breach, Says Hundreds Affected
AIPAC reports data breach after external system access, hundreds affected, investigation ongoing with added security steps.
supply chain
What It Takes to Move a Factory From China to Vietnam
Tariffs have forced Chinese companies to move their operations to Vietnam. Alexandra Stevenson, our Shanghai bureau chief, visits a factory in Ho Chi Minh City to see how one of the biggest challenges isn’t relocating machinery and tools, but overcomin…
Fake NPM Package With 206K Downloads Targeted GitHub for Credentials
Veracode Threat Research exposed a targeted typosquatting attack on npm, where the malicious package @acitons/artifact stole GitHub tokens. Learn how this supply chain failure threatened the GitHub organisation’s code.
Why Organizations Can’t Ignore Vendor Risk Assessment in Today’s Cyber-Threat Landscape
In an era where digital ecosystems extend far beyond a company’s internal network, enterprise cybersecurity is no longer…
Adopting a counterintelligence mindset in luxury logistics
In this Help Net Security interview, Andrea Succi, Group CISO at Ferrari Group, discusses how cybersecurity is integrated into every aspect of the logistics industry. He explains why protecting data can be as critical as securing physical assets and ho…
Severe React Native Flaw Exposes Developer Systems to Remote Attacks
JFrog researchers found a critical RCE vulnerability (CVE-2025-11953) in the popular React Native CLI. Developers using versions 4.8.0-20.0.0-alpha.2 must update to patch the flaw.
Chinese APT Uses ‘Airstalk’ Malware in Supply Chain Attacks
PowerShell and .NET variants of the malware abuse AirWatch’s MDM API to establish a C&C communication channel.
The post Chinese APT Uses ‘Airstalk’ Malware in Supply Chain Attacks appeared first on SecurityWeek.
Heisenberg: Open-source software supply chain health check tool
Heisenberg is an open-source tool that checks the health of a software supply chain. It analyzes dependencies using data from deps.dev, Software Bills of Materials (SBOMs), and external advisories to measure package health, detect risks, and generate r…
Xi Delivers Veiled Warning to Nations Not to Take the U.S.’s Side
At an Asia-Pacific summit, the Chinese leader urged countries to “resist unilateral bullying,” an appeal that seemed at odds with his country’s recent actions.
Chainguard Raises $280 Million in Growth Funding
Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions.
The post Chainguard Raises $280 Million in Growth Funding appeared first on SecurityWeek.