#supply chain attack

2 articles

2 articles about supply chain attack: tutorials, explainers and interview questions, newest first.

Latest

2 articles

Cybersecurity Weekly Recap (Oct 19–26, 2026): 9 Threats You Need to Know, from PHP2Shell to GitLab CVSS 10

It was an “Everything2Shell” week: critical remote code execution bugs in PHP, Brotli and Plex, a CVSS 10 GitLab flaw, a certificate authority quitting over weak keys, and a poisoned LiteLLM release. Here’s what happened, who’s affected and a prioritised patch checklist.

12 min read

Cyber SecurityOct 26

Gheist GitHub Attack: How Stolen Tokens Dump Your Actions Secrets (and How to Check in 5 Minutes)

A campaign called Gheist has planted 13,500+ secret-dumping workflows using stolen GitHub tokens. Base32 gets past log masking, permissions: {} doesn’t block access to secrets, and data leaves through GitHub’s own API. Here’s how to check your repos and lock things down.

11 min read

You're all caught up ✨