supply chain

5 min read

• AI
• Aikido Security
• artificial intelligence (AI)
• CI/CD
• Cybersecurity
• mini shai hulud
• npm
• open source software
• Shai Hulud
• snyk
• Socket
• supply chain
• Threats

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack

Cyber Scoop May 12, 2026

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in...

Read More

4 min read

• cybercrime
• Cybersecurity
• Google Threat Intelligence Group
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel attack fallout expands to more customers and third-party systems

Cyber Scoop April 23, 2026

Vercel attack fallout expands to more customers and third-party...

Read More

3 min read

• AI
• AWS
• Context.ai
• CrowdStrike
• cybercrime
• Cybersecurity
• Google
• Google Threat Intelligence Group
• Google Workspace
• Mandiant
• OAuth
• open source
• open source software
• ShinyHunters
• supply chain
• supply chain attacks
• supply chain security
• Threats
• Vercel

Vercel’s security breach started with malware disguised as Roblox cheats

Cyber Scoop April 20, 2026

Vercel’s security breach started with malware disguised as Roblox...

Read More

3 min read

• AI
• artificial intelligence (AI)
• cybercrime
• Cybersecurity
• hacking
• open source
• open source software
• OpenAI
• Research
• supply chain
• supply chain attacks
• Technology
• Threats

OpenAI’s Mac apps needs an update thanks to the Axios hack

Cyber Scoop April 13, 2026

OpenAI’s Mac apps needs an update thanks to the...

Read More

3 min read

• Aqua Security
• cybercrime
• Cybersecurity
• data breaches
• Mandiant
• open source
• open source software
• RSAC 2026 Conference
• supply chain
• supply chain attacks
• Threats
• Trivy

Experts warn of a ‘loud and aggressive’ extortion wave following Trivy hack

Cyber Scoop March 24, 2026

Experts warn of a ‘loud and aggressive’ extortion wave...

Read More

4 min read

• Commentary
• compliance
• cybercrime
• Executive order
• office of management and budget
• op-ed
• phishing
• ransomware
• SBOM
• secure-by-design
• Sextortion
• software security
• supply chain

If consequences matter, they should apply to vendors, too

Cyber Scoop March 11, 2026

If consequences matter, they should apply to vendors, too...

Read More

5 min read

• artificial intelligence (AI)
• Bennie Thompson
• Business Software Alliance
• critical infrastructure
• cyber offense
• cyber strategy
• cybercrime
• Department of Homeland Security (DHS)
• Department of Justice (DOJ)
• Elastic
• Federal IT
• Frank Cilluffo
• Government
• House Homeland Security Committee
• McCrary Institute
• Policy
• post quantum cryptography
• regulation
• State Government
• supply chain
• surveillance
• USTelecom
• White House
• workforce
• Zero Trust

The long-awaited Trump cyber strategy has arrived

Cyber Scoop March 6, 2026

The long-awaited Trump cyber strategy has arrived | CyberScoop...

Read More

8 min read

• AI
• Commentary
• critical infrastructure
• Cybersecurity
• data centers
• op-ed
• operational technology
• secure-by-design
• software bill of materials
• supply chain

Why ‘secure-by-design’ systems are non-negotiable in the AI era

Cyber Scoop February 17, 2026

Why ‘secure-by-design’ systems are non-negotiable in the AI era...

Read More

4 min read

• access tokens
• Cybersecurity
• Gainsight
• Google Threat Intelligence Group
• Mandiant
• OAuth
• Salesforce
• Salesloft
• Salesloft Drift
• supply chain
• supply chain attacks
• supply chain security
• Threats

Gainsight CEO downplays impact of attack that spread to Salesforce environments

Cyber Scoop November 25, 2025

Gainsight CEO downplays impact of attack that spread to...

Read More

4 min read

• apt
• China
• Cybersecurity
• Government
• Research
• software security
• supply chain

Flax Typhoon can turn your own software against you

Cyber Scoop October 14, 2025

Flax Typhoon can turn your own software against you...

Read More