Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain ...

Company leaders should implement proactive, real-time monitoring and intelligence to ensure that the “weakest link” doesn’t ...

As warfare is reinvented in Ukraine, and Silicon Valley races to maintain its A.I. lead, China’s battery dominance is raising ...

An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines ...

CISA warns of attacks exploiting CVE-2025-59374, a backdoor introduced in the Asus Live Update tool in a supply chain attack.

AI Adoption Outpaces Security: Most organizations are embracing AI in development, yet robust security protocols for AI-generated code are largely absent, creating new attack vectors. Although 76% of ...

Software supply chain attacks are evolving as open source and AI-generated code introduce new third-party risks. Learn how ...

Veefin Solution’s success in building out functionality through a combination of in-house development and strategic acquisition marks it out as a true innovator in supply chain finance software.

Federal IT and cybersecurity teams dealing with critical infrastructure must take steps to build supply chain resilience in light of increased risk. Nearly half of critical infrastructure ...

The partnership delivers a "Start Safe, Stay Secure and Compliant" posture by uniting Chainguard's hardened container images with Anchore's SBOM scanning and policy framework. "We are futureproofing ...

If you needed another reminder that our software supply chains are only as strong as their smallest link, the JavaScript ecosystem delivered it. In early September, attackers phished the NPM account ...