SolarWinds hack exposes underbelly of supply-chain attacks
The SolarWinds breach is a stark reminder that the government is dependent on a network of firms that can be quietly weaponized against it.
China-based hackers used front companies to hack Uighurs, Facebook sayscyberscoop.com
Energy giant Shell impacted in Accellion hackcyberscoop.com
Finland implicates China-linked APT31 in parliament hackcyberscoop.com
DNS hacks are attacks on critical infrastructure, senior U.S. diplomat sayscyberscoop.com
Top insurer CNA disconnects systems after cyberattackcyberscoop.com
Federal advisories detail bitcoin payments to ransomware gangs, urgency of threatcyberscoop.com
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot ServiceSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker
Understanding CSRF attacksVercel
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Securing the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music ScrapingSocket
Signing is Just the StartSocket
