AI is transforming software supply chain risks: attacks are now primarily targeting developer workflows and open-source repositories, while threats surrounding model weights, vector stores, and MCP servers remain largely experimental. Attackers are even exploiting package names hallucinated by generative AI by registering them as malicious packages, which AI agents may then install automatically. According to […]
Research by OCCRP, Investico, and NU reveals that the password manager Passwork, presented as European, was originally developed in Russia. The company reportedly deliberately shielded its Russian origins through structures in Finland, Spain, and the UAE. Cybersecurity experts warn that ties to the Russian state and defence sector pose additional risks, particularly for critical infrastructure. […]
Lidl is warning webshop customers about phishing after attackers obtained personal data via an external IT service provider. Leaked data includes names, email addresses, phone numbers, dates of birth, and customer numbers of customers from the Netherlands, Belgium, and Germany. The exact cause and scope of the incident have not yet been disclosed. With this […]
The FBI was able to identify an alleged member of the Scattered Spider hacking group thanks to Microsoft’s Global Device Identifier (GDID), a unique Windows identifier linked to an installation. Despite the use of VPNs, proxies, and rotating IP addresses, the GDID remained visible, allowing investigators to link digital footprints to the same Windows installation. […]