Massive supply chain cyberattack on the horizon in Ukraine, according to police
The attack may come through another booby-trapped software update, according to a cryptic press release published Thursday by the Secret Service of Ukraine.
Top insurer CNA disconnects systems after cyberattackcyberscoop.com
Quasi-Russian upstart reportedly targeted Ukraine in cyber-espionage campaigncyberscoop.com
China-based hackers used front companies to hack Uighurs, Facebook sayscyberscoop.com
Federal advisories detail bitcoin payments to ransomware gangs, urgency of threatcyberscoop.com
US racing to address Microsoft vulnerabilities, especially for small businessescyberscoop.com
Energy giant Shell impacted in Accellion hackcyberscoop.com
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker
HTTP instrumentation configurationOpentelemetry
How Smart Charge America uses Zapier and Copper for salesZapier
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Securing the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
Signing is Just the StartSocket
Lessons Learned from a Year of Testing the Web PlatformCss Tricks
