Data Center Hardware Security: Marvell, Microsoft, and Oracle Standardize Unified Controls
Marvell, Microsoft, and Oracle collaborate to define a unified data-center hardware security framework, targeting firmware integrity, boot verification.
supply chain
6 stories
GhostAction GitHub Actions Credential-Stealing Workflows Planted in 34,000+ Repositories
GhostAction injected malicious GitHub Actions workflows into over 34,000 repositories, exfiltrating secrets via plain HTTP to a hard-coded IP.
GlassWorm VS Code Themes and Ransomware Affiliate Betrayal Highlight Weekly Threat Brief
Examine recent threat intelligence findings detailing GlassWorm VS Code theme extensions, ransomware affiliate betrayals, and open access infrastructure.
North Korean Actors Deploy Malicious Terraform Providers to Distribute Go Malware via HashiCorp Registry
Researchers reveal DPRK-linked actors using HashiCorp's Terraform Registry to deliver Go-based malware with blockchain and Slack C2 channels.
TanStack npm supply chain attack fuels CrowdSec breach of 170 private repos
The TanStack npm supply chain attack harvested a GitHub token that allowed an ex-employee to copy 170 private CrowdSec repositories, exposing code.
npm supply chain attack RedC2 Deploys AI-Powered Linux Backdoor
Trend Micro researchers detail an npm supply chain attack RedC2 that drops an AI‑enabled Linux backdoor, exposing Node.js ecosystems to advanced command‑and‑con