Security Operations

Modern supply-chain attacks and their real-world impact

Supply-chain attacks have evolved considerably in the last two years going from dependency confusion or stolen SSL among others once common attacks to AI-backed social engineering and open-source registries.

US Appeals Court lowers burden of proof for data breach lawsuits

The 4th Circuit Court has ruled that dark web data publication alone may be damaging — a decision that could raise extortion stakes, rewrite CISOs’ risk calculus, and increase breached companies’ lawsuit exposure.

71% of CISOs hit with third-party security incident this year

Increasingly complex business partnerships and rising reliance on third-party software components are proving to be ever weakening cybersecurity links.

Attackers steal data from Salesforce instances via compromised AI live chat tool

One of their goals was to access other credentials to compromise other environments.

SpyCloud Launches Supply Chain Solution to Combat Rising Third-Party Identity Threats

Supply chain attack compromises npm packages to spread backdoor malware

Phishing attacks on package maintainer accounts led to infected JavaScript type testing utilities.

Cybersecurity in the supply chain: strategies for managing fourth-party risks

Third-party vendors are a well-known risk but they are often not the last point in the supply chain and cybersecurity leaders need to ensure fourth-party providers are given the same treatment.