CISA Adds TanStack Router Vulnerability to KEV Catalog
Malicious packages were published to npm registry exploiting TanStack identity to steal credentials
Tag: supply-chain
CISA Warns of Supply Chain Attacks Targeting GitHub and Developer Tools
Multiple campaigns compromised CI/CD pipelines through malicious VS Code extensions and GitHub Actions workflows.
Weekly Security Roundup Highlights Multiple Attack Vectors
Security researchers document exchange server vulnerabilities, npm supply chain attacks, and cloud infrastructure compromise patterns.
Cybercriminal Twins Arrested After Recording Microsoft Teams Call
Law enforcement caught the siblings after they inadvertently recorded their criminal planning session.
Ransomware group claims Foxconn breach
Hackers target major electronics manufacturer that produces devices for Apple, Google, and Nvidia
Foxconn confirms cyberattack targeting Apple, Nvidia data
Manufacturing giant says affected factories are operational after ransomware group claims confidential file theft.