Korean VPN supply chain attack, PayPal settles with New York for $2 million, trojanized RAT builder targets script kiddies.

South Korean VPN provider IPany was breached in a supply chain attack by the "PlushDaemon" China-aligned hacking group, who ...

PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.

ESET researchers uncovered a supply chain attack on a South Korean VPN by the China-aligned APT group PlushDaemon ...

Supply chain attacks exploit vulnerabilities in interconnected systems, targeting not just primary companies but the web of ...

As cybercrime continues to evolve in scope, the threat posed by vulnerabilities within the IT supply chain cannot be ...

Call for Presentations (CFP) is open for the 2025 Supply Chain Security & Third-Party Risk Summit, taking place virtually on ...

Global conflicts, AI-powered threats, and supply chain attacks demand a proactive shift to cyber readiness, as 2025 brings ...

Tokio Marine HCC has released its "Top 10 Cyber Incidents 2024" report, documenting some of the most significant cyber events ...

The report noted the following critical risks to global supply chains in 2025 : ...

PlushDaemon’s main initial access vector is hijacking legitimate updates of Chinese applications, but we have also uncovered a supply-chain attack against a South Korean VPN developer.

An increase in compliance activities such as the creation of software bills of materials (SBOMs), performing software ...