The critical need for watertight security across the IT supply chain
One channel used by hackers that is fast becoming a key concern is the IT supply chain. Cybercriminals are exploiting ...
SecurityWeek2d
In Other News: VPN Supply Chain Attack, PayPal $2M Settlement, RAT Builder Hacks Script Kiddies
Korean VPN supply chain attack, PayPal settles with New York for $2 million, trojanized RAT builder targets script kiddies.
IPany VPN breached in supply-chain attack to push custom malware
South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who ...
Cyber Defense Magazine1d
The Frontier of Security: Safeguarding Non-Human Identities
Dropbox, Microsoft, Okta - not only are these all major software companies, but each of them has fallen victim to a supply ...
insurancebusinessmag5d
The rise of supply chain cyberattacks – how can clients protect themselves?
Supply chain attacks exploit vulnerabilities in interconnected systems, targeting not just primary companies but the web of ...
SecurityWeek5d
Cyber Insights 2025: Attack Surface Management
SecurityWeek's Cyber Insights 2025 examines expert opinions to gain their opinions on what to expect in Attack Surface ...
Material Handling & Logistics4d
$1 Trillion Supply Chain Impact from Geopolitical Risk
The report noted the following critical risks to global supply chains in 2025 : ...
Security Boulevard4d
Announcing the 2025 State of Application Risk Report
We’re pleased to announce the publication of our 2025 State of Application Risk report. Based on anonymized data collected ...
WeLiveSecurity4d
PlushDaemon compromises supply chain of Korean VPN service
In this blogpost, we have analyzed a supply-chain attack against a Korean VPN provider, targeting users in East Asia, as evident through the specific software targeted for information collection ...
Security Boulevard6d
Executive Order 14144 on Cybersecurity: Building on 2021’s Foundation with Advanced NHI Security
Building on EO 14028, EO 14144 advances U.S. cybersecurity with actionable steps for NHI security and secrets management.
The Hacker News4d
PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack
The rogue version of the installer, which has since been removed from the website, is designed to drop the legitimate software as well as the SlowStepper backdoor. It's currently not clear who the ...