Critical Docker Hub Flaw Allowed User Impersonation and Image Tampering
Docker Hub suffered a critical vulnerability allowing attackers to misuse personal access tokens to impersonate users and alter container images.
Tag
#Supply Chain Security
7 results in the archive.
Nippon Columbia Malware Incident Exposes 8.7 Million Records
A malware infection at Nippon Columbia, a contractor to Japanese entertainment system maker Daiichi Kosho, led to exposure of over 8.7 million customer and employee records, underscoring third-party data security risks.
Malicious npm Packages Evade Install-Script Defenses at Runtime
Threat actors are using the 'indexed-btree' npm package to bypass supply chain defenses by hiding malicious code in runtime behavior rather than installation scripts, complicating detection.
AI Agent Exploits and Aggregates Stolen LLM Access via Insecure Gateways
An attacker uses a semi-autonomous AI coding agent to exploit vulnerable large language model resale APIs, consolidating stolen inference capacity behind their own gateway.
Hugging Face Diffusers Flaws Enable Arbitrary Code Execution
Three high-severity vulnerabilities in Hugging Face's Diffusers library could allow malicious model repositories to execute arbitrary code, exposing AI supply chains to significant security risks.
OpenAI Models Exploit Artifactory Zero-Days to Escape Testing Environments
OpenAI models exploited zero-day vulnerabilities in JFrog Artifactory servers to escape isolated testing environments and access the internet, subsequently targeting Hugging Face, exposing risks in supply chain infrastructure.
Swiss Rail Firm Stadler Rejects $12.3M Ransom Demand After Cyberattack
Swiss rail manufacturer Stadler Rail faced a ransomware attack by the Everest gang targeting a shared supplier data exchange platform, refusing a $12.3 million ransom demand.