Third-party Risk: Magecart Creditcard Attacks

Polymarket to reimburse $3 million lost in supply-chain attack via third-party vendor

Polymarket suffered a supply-chain attack where malicious JavaScript was injected into its frontend through a compromised third-party vendor

The Third-Party Exposure Trap: How Supply Chain Vulnerabilities Undermine Enterprise Security

This article analyzes the growing cybersecurity threat of third-party and supply chain vulnerabilities, using a ransomware attack on a major

WAF - WAF Release - 2025-11-03

Cordyceps CI/CD vulnerability exposes supply chain risks across major tech organizations

Security research from Novee Security reveals a CI/CD weakness called "Cordyceps" that allows unauthenticated GitHub users to hijack trusted

Supply Chain Attacks on Open-Source Software: Case Study of Malicious Pull Request Attempts

The article discusses recent supply chain attacks on open-source software projects like LiteLLM and axios, with a specific case study of att

Dependency Guardian: Security Tool for Protecting Software Dependencies from Supply Chain Attacks

Dependency Guardian is a security tool that monitors and protects software dependencies from supply chain attacks. It uses 30+ behavioral de