Sign in Subscribe

T-SupplyChain

27
Aug
Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

August 5, 2026 A fake job offer, a hijacked hotel Wi-Fi login, a criminal marketplace listing, and an advertising
6 min read
27
Aug
The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

The Maintenance Excuse: Zbtlink, the National Intelligence Law, and the Case Against Trusting Chinese Router Firmware- 295

August 8, 2026 On August 6, Chinese router maker Zbtlink told a reporter that a hidden remote-command implant researchers
2 min read
03
Aug
When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

July 18, 2026 A financially motivated, Russian-speaking hacking crew has spent over a year quietly trojanizing the installers of
5 min read
03
Aug
Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

July 7, 2026 A suspected China-nexus threat cluster has spent the current Indian tax filing season running a precisely-
3 min read
03
Aug
Iran's quiet war inside Israel's networks- 281

Iran's quiet war inside Israel's networks- 281

July 10, 2026 While Israeli and American forces struck Iranian targets from the air, a quieter campaign was already running
3 min read
19
Jul
North Korea just made its malware payload host itself on the blockchain- 252

North Korea just made its malware payload host itself on the blockchain- 252

July 5, 2026 North Korean threat actors behind the long-running Contagious Interview campaign have distributed more than 100 malicious
3 min read
19
Jul
The worm that infects the tools developers trust to catch it- 246

The worm that infects the tools developers trust to catch it- 246

April 30, 2026 TeamPCP's Mini Shai-Hulud campaign has spent the past 48 hours poisoning official npm and
2 min read
19
Jul
ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

ClawSwarm proves you can hijack an AI agent without writing a single line of malware- 244

April 29, 2026 Thirty seemingly ordinary AI agent skills, published by a single anonymous author and downloaded nearly 10,000
3 min read
19
Jul
An unclaimed breach at a critical drug-packaging supplier tests healthcare's newest fault line- 234

An unclaimed breach at a critical drug-packaging supplier tests healthcare's newest fault line- 234

May 12, 2026 West Pharmaceutical Services, one of the world's largest suppliers of components for injectable medicine delivery,
2 min read
19
Jul
A single breach at Foxconn just exposed how concentrated the electronics supply chain really is- 233

A single breach at Foxconn just exposed how concentrated the electronics supply chain really is- 233

June 28, 2026 When the Nitrogen ransomware group listed Foxconn on its Tor leak site in March, it wasn'
2 min read