Software Supply Chain RSS Feeds

Directory2 software supply chain feeds · 23 articlesShow all languages →

Latest

Software Supply Chain articles

AI Models Autonomously Exploit Zero-Day Vulnerabilities: JFrog and OpenAI Collaborate on Rapid Remediation

Discover how AI models expose zero-day vulnerabilities and why rapid remediation is essential for modern software supply chain security.

Newstechnologysecurityartificial intelligence

jfrog.com·Hacker News: Front Page·22d ago·4 min read

Manifest: A platform for software and AI supply chain transparency

technologybusiness

Shared by @yespress.bsky.social ↗

yespress.io1mo ago

Study finds 5,673 compromised Android signing keys on GitHub affecting over 10 billion users

Android app signing relies on developer-managed credentials, making secure key protection essential for the integrity of the software supply chain. A recent platform key leakage incident involving two major OEM manufacturers demonstrates that even robustl

Insighttechnologyscience

Shared by @r-blueteamsec.bsky.social ↗

arxiv.org1mo ago

Typosquatted npm Package Delivers Windows RAT with Encrypted C2 and Registry Persistence

Newstechnologycybersecurity

Shared by @securityrss.bsky.social ↗

cybersecuritynews.com1mo ago

Why Runtime Scanning Falls Short for CI/CD Supply Chain Security

This article argues that detection-only security fails because runtime alerts arrive after malicious dependencies have already executed, exfiltrated data, or established persistence. It recommends shifting software supply chain defense to t...

Insighttechnologysecuritydevops

hendryadrian.com·Tech by Flipboard·2mo ago·1 min read

NanoClaw partners with JFrog to enable secure resource downloads for AI agents

AI agents can't be trusted, so don't give them dangerous powers

Newstechnologybusinessai security

theregister.com·Tech by Flipboard·2mo ago·4 min read

NanoClaw and JFrog partner on security integration to protect AI agents from malicious code downloads

NanoClaw, an enterprise-friendly OpenClaw variant, has partnered with JFrog, a leader in software supply chain management, to introduce a new security integration. This collaboration aims to protect N…

Newstechnologysecurityai infrastructure

clawbeat.co·Tech by Flipboard·2mo ago·2 min read

Supply Chain Attack via Malicious Commit Hits 73 Microsoft GitHub Repositories

Newstechnologycybersecurity

Shared by @redmondit.bsky.social ↗

redmondmag.com2mo ago

GitHub Disables 73 Microsoft Repositories After Miasma Worm Attack

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

Red Hat removes 32 compromised packages after GitHub account breach led to malware distribution

Newstechnologycybersecurity

Shared by @kitafox.bsky.social ↗

therecord.media2mo ago

AWS well-architected best practices for software supply chain security

Insighttechnologyprogramming

Shared by @netmarkjp.bsky.social ↗

aws.amazon.com2mo ago

Red Hat npm packages compromised in Miasma supply chain attack exposing developer credentials

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

IDC predicts half of APAC enterprises will need AI bill of materials by 2028 as supply chain risks grow

Newstechnologybusiness

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

CISA warns security teams of wave of attacks targeting software supply chain credentials

The agency warned about a wave of attacks targeting credentials and other secrets across critical supply chains.

Newstechnologysecuritycybersecurity

cybersecuritydive.com·Tech by Flipboard·2mo ago·2 min read

AWS well-architected framework best practices for software supply chain security

Insighttechnologyprogramming

Shared by @hacker.at.thenote.app ↗

aws.amazon.com2mo ago

Glassworm botnet targeting software developers taken down by CrowdStrike, Google, and Shadowserver

Newstechnologysecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co2mo ago

Glassworm Malware Campaign Targets Developers via npm, PyPI, OpenVSX, and GitHub

Newstechnologycybersecurity

Shared by @infosec.skyfleet.blue ↗

cybersecuritynews.com2mo ago

EOL Dataset: Free tool to detect end-of-life dependencies across 12M+ package versions

Producttechnologyprogramming

Product Hunt4mo ago

OX Security1

Cloudsmith1

AI Models Autonomously Exploit Zero-Day Vulnerabilities: JFrog and OpenAI Collaborate on Rapid Remediation

Manifest: A platform for software and AI supply chain transparency

Study finds 5,673 compromised Android signing keys on GitHub affecting over 10 billion users

Typosquatted npm Package Delivers Windows RAT with Encrypted C2 and Registry Persistence

Why Runtime Scanning Falls Short for CI/CD Supply Chain Security

NanoClaw partners with JFrog to enable secure resource downloads for AI agents

NanoClaw and JFrog partner on security integration to protect AI agents from malicious code downloads

Supply Chain Attack via Malicious Commit Hits 73 Microsoft GitHub Repositories

GitHub Disables 73 Microsoft Repositories After Miasma Worm Attack

Red Hat removes 32 compromised packages after GitHub account breach led to malware distribution

AWS well-architected best practices for software supply chain security

Red Hat npm packages compromised in Miasma supply chain attack exposing developer credentials

IDC predicts half of APAC enterprises will need AI bill of materials by 2028 as supply chain risks grow

CISA warns security teams of wave of attacks targeting software supply chain credentials

AWS well-architected framework best practices for software supply chain security

Glassworm botnet targeting software developers taken down by CrowdStrike, Google, and Shadowserver

Glassworm Malware Campaign Targets Developers via npm, PyPI, OpenVSX, and GitHub

EOL Dataset: Free tool to detect end-of-life dependencies across 12M+ package versions