supply chain attack - Tech News from Simmons Systems

Tech News from Simmons Systems

supply chain attack

A collection of 25 posts

Hackers Hijack Coder's Registry to Deliver Credential-Stealing Terraform Modules

Attackers compromise Coder's Cloudflare infrastructure and add unauthorized servers to the project's module registry, delivering malicious Terraform modules to a subset of users. Coder's registry, registry.coder.com, serves as the package-hosting site where developers source components for workspace templates. Because the attacker gains

BGP Hijack Delivers Malware Through Softaculous Update Infrastructure

Unknown attackers carry out a supply chain attack by hijacking a portion of Internet space used to deliver updates for software from Softaculous, a UAE-based company behind Virtualizor, a platform for managing virtualized environments. By exploiting weaknesses in routing security at hosting provider Hetzner Online and gaps in the TLS

Australian Police Arrest Two Suspected TeamPCP Hackers Behind Massive Supply-Chain Campaign

Australian Federal Police announce the arrest of two men accused of participating in cybercrimes for TeamPCP, a prolific hacking group that compromises more than 1,000 organizations worldwide over nine months. The men face 14 charges and live in the Western Australian towns of Cottesloe and Mandurah. While police do

Hackers Compromise Popular Rust Crate arrayref in Supply-Chain Malware Attack

Hackers compromise the maintainer account behind the popular Rust crate arrayref to inject malware that runs on developers' systems during compilation. In a 23-minute window, the attacker also poisons two other crates maintained by the same account, append-only-vec and internment. The malicious releases include arrayref 0.3.10, append-only-vec

supply chain attack

Supply-Chain Attack on AI Tool Exposes Terabytes of Corporate Credentials

A massive supply-chain attack on LiteLLM, an open-source tool that streamlines AI-driven software development, exposes terabytes of sensitive credentials belonging to thousands of organizations. Security firms CloudSEK and Hudson Rock reveal that cloud keys, repository tokens, SSH keys, Kubernetes secrets, and AI provider keys are among the data stolen from

ChainDrop Worm Compromises Over 1,300 npm Packages in Massive Supply-Chain Attack

A self-propagating worm dubbed ChainDrop compromises over 1,300 packages on the npm registry, targeting popular caching utilities like Keyv and Cacheable. The attack originates after threat actors breach the GitHub account of a prominent package maintainer, allowing the worm to push malicious code directly to main project branches. Because

Hackers Compromise Jscrambler npm Package with Infostealer Malware

Hackers compromise the Jscrambler npm package, injecting information-stealing malware into versions 8.14, 8.16, 8.17, and 8.20. The malicious package executes during the preinstall hook and receives approximately 1,479 downloads within a two-hour window before Jscrambler deprecates it and releases a safe version. The company confirms

Viasat Hack Shows Cyber Attacks Enable Physical Warfare in Ukraine

A Russian-linked cyberattack on Viasat's satellite network disrupted Ukrainian communications just hours before the physical invasion began. This software supply chain attack demonstrates how adversaries use malicious code to directly support military operations.

Attackers Target Developers With Fake DeepSeek Packages on PyPI

Threat actors are exploiting the recent hype around DeepSeek by distributing malicious Python packages designed to steal sensitive data. The packages are quickly removed, but developers still face significant risks from trendy, unverified code.

Cyberhaven Chrome Extension Hacked in Christmas Day Supply Chain Attack

Hackers compromise a Cyberhaven developer account to push a malicious Chrome extension update that steals session tokens and passwords. The company quickly removes the compromised version and urges all affected users to rotate their credentials immediately.

REvil Ransomware Exploits Kaseya VSA in Massive Supply Chain Attack

The REvil ransomware gang leverages a zero-day vulnerability in the Kaseya VSA platform to deploy ransomware through a malicious software update. This supply chain attack highlights the growing trend of financially motivated cybercriminals compromising third-party IT management tools.

REvil Ransomware Exploits Kaseya Software in Massive Supply Chain Attack

The REvil ransomware gang leverages a vulnerability in Kaseya VSA software to encrypt thousands of systems across hundreds of downstream businesses. This massive supply chain attack forces multiple organizations worldwide to shut down operations entirely.

Kaseya Ransomware Attack Highlights Critical Supply Chain Risks

The massive Kaseya ransomware attack exploits supply chain vulnerabilities to compromise managed service providers and their downstream clients. This complex threat demands robust detection and rapid incident response strategies to prevent widespread operational disruption.

Red Canary Thwarts Kaseya Supply Chain Ransomware Attack Over Holiday Weekend

Red Canary's behavior-based detections allow organizations like Unitus Community Credit Union to block the REvil ransomware attack before it causes disruption, even when third-party vendors are compromised.

Kaseya Ransomware Attack Disrupts Over 1,000 Businesses Worldwide

A massive ransomware attack on software supplier Kaseya exploits managed service providers to indirectly compromise at least 1,000 downstream businesses. The breach, linked to the REvil group, forces major operations like Swedish supermarkets to close temporarily.