Software Supply Chain RSS Feeds

Directory2 software supply chain feeds · 22 articlesShow all languages →

FeedBagel

Latest

Software Supply Chain articles

Manifest: A platform for software and AI supply chain transparency

The software and AI supply chain transparency platform. Know what's inside what you build and buy.

technologybusinesssoftware supply chain

yespress.io·Tech by Flipboard·8d ago·2 min read

Study finds 5,673 compromised Android signing keys on GitHub affecting over 10 billion users

Android app signing relies on developer-managed credentials, making secure key protection essential for the integrity of the software supply chain. A recent platform key leakage incident involving two major OEM manufacturers demonstrates that even robustl

Insighttechnologyscience

Shared by @r-blueteamsec.bsky.social ↗

arxiv.org17d ago

Typosquatted npm Package Delivers Windows RAT with Encrypted C2 and Registry Persistence

Newstechnologycybersecurity

Shared by @securityrss.bsky.social ↗

cybersecuritynews.com23d ago

Why Runtime Scanning Falls Short for CI/CD Supply Chain Security

Insighttechnologysecurity

Shared by @hendryadrian.bsky.social ↗

hendryadrian.com1mo ago

NanoClaw partners with JFrog to enable secure resource downloads for AI agents

AI agents can't be trusted, so don't give them dangerous powers

Newstechnologybusinessai security

theregister.com·Tech by Flipboard·1mo ago·4 min read

NanoClaw and JFrog partner on security integration to protect AI agents from malicious code downloads

NanoClaw, an enterprise-friendly OpenClaw variant, has partnered with JFrog, a leader in software supply chain management, to introduce a new security integration. This collaboration aims to protect N…

Newstechnologysecurityai infrastructure

clawbeat.co·Tech by Flipboard·1mo ago·2 min read

Supply Chain Attack via Malicious Commit Hits 73 Microsoft GitHub Repositories

GitHub disabled 73 Microsoft repositories on June 5 after a malicious commit landed in an Azure project, in what researchers described as a supply chain attack aimed at developer workstations and AI coding environments.

Newstechnologycybersecuritynews

redmondmag.com·Tech by Flipboard·1mo ago·4 min read

GitHub Disables 73 Microsoft Repositories After Miasma Worm Attack

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Red Hat removes 32 compromised packages after GitHub account breach led to malware distribution

Newstechnologycybersecurity

Shared by @kitafox.bsky.social ↗

therecord.media1mo ago

AWS well-architected best practices for software supply chain security

Insighttechnologyprogramming

Shared by @netmarkjp.bsky.social ↗

aws.amazon.com1mo ago

Red Hat npm packages compromised in Miasma supply chain attack exposing developer credentials

Newstechnologycybersecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

IDC predicts half of APAC enterprises will need AI bill of materials by 2028 as supply chain risks grow

Newstechnologybusiness

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

CISA warns security teams of wave of attacks targeting software supply chain credentials

Newstechnologysecurity

Shared by @patrickcmiller.bsky.social ↗

cybersecuritydive.com1mo ago

AWS well-architected framework best practices for software supply chain security

There have been multiple notable supply chain attacks using the npm Registry since September: Shai-Hulud, Chalk/Debug, one abusing tea.xyz tokens, and recently axios. Thanks to community efforts involving the Amazon Inspector team, the Open Source Securit

Insighttechnologyprogrammingsoftware supply chain

aws.amazon.com·Tech by Flipboard·1mo ago·12 min read

Glassworm botnet targeting software developers taken down by CrowdStrike, Google, and Shadowserver

Newstechnologysecurity

Shared by @infosecbriefly.bsky.social ↗

briefly.co1mo ago

Glassworm Malware Campaign Targets Developers via npm, PyPI, OpenVSX, and GitHub

Newstechnologycybersecurity

Shared by @infosec.skyfleet.blue ↗

cybersecuritynews.com1mo ago

EOL Dataset: Free tool to detect end-of-life dependencies across 12M+ package versions

Producttechnologyprogramming

Product Hunt3mo ago

Glassworm Threat Actor Returns with Unicode-Based Supply Chain Attacks on GitHub, npm, and VS Code

Newstechnologycybersecurity

aikido.dev4mo ago

OX Security1

Cloudsmith1

Manifest: A platform for software and AI supply chain transparency

Study finds 5,673 compromised Android signing keys on GitHub affecting over 10 billion users

Typosquatted npm Package Delivers Windows RAT with Encrypted C2 and Registry Persistence

Why Runtime Scanning Falls Short for CI/CD Supply Chain Security

NanoClaw partners with JFrog to enable secure resource downloads for AI agents

NanoClaw and JFrog partner on security integration to protect AI agents from malicious code downloads

Supply Chain Attack via Malicious Commit Hits 73 Microsoft GitHub Repositories

GitHub Disables 73 Microsoft Repositories After Miasma Worm Attack

Red Hat removes 32 compromised packages after GitHub account breach led to malware distribution

AWS well-architected best practices for software supply chain security

Red Hat npm packages compromised in Miasma supply chain attack exposing developer credentials

IDC predicts half of APAC enterprises will need AI bill of materials by 2028 as supply chain risks grow

CISA warns security teams of wave of attacks targeting software supply chain credentials

AWS well-architected framework best practices for software supply chain security

Glassworm botnet targeting software developers taken down by CrowdStrike, Google, and Shadowserver

Glassworm Malware Campaign Targets Developers via npm, PyPI, OpenVSX, and GitHub

EOL Dataset: Free tool to detect end-of-life dependencies across 12M+ package versions

Glassworm Threat Actor Returns with Unicode-Based Supply Chain Attacks on GitHub, npm, and VS Code