Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UNC1069 Axios npm Compromise: Supply Chain Detection and Defense
UNC1069 Axios npm Compromise: Supply Chain Detection and Defense Introduction The open-source ecosystem is currently facing a critical secur...
Axios npm Supply Chain Attack (UNC1069): Detecting WAVESHAPER.V2 and Remediation for Versions 1.14.1/0.30.4
On March 31, the open-source ecosystem suffered a significant shock when the widely used axios npm package—boasting over 100 million weekly ...
Advantest Encryption-Based Attack: Detecting and Containing Ransomware in Semiconductor Supply Chains
Introduction Advantest, a critical supplier of semiconductor testing equipment for major chip manufacturers globally, has confirmed it is re...
Medication Inventory Technology: A Critical Component of Healthcare Availability Security
Medication Inventory Technology: A Critical Component of Healthcare Availability Security Introduction In healthcare cybersecurity, we often...
Axios NPM Supply Chain Compromise: Detecting Industrialized Social Engineering and Malicious Packages
Introduction The recent attack on the axios NPM package is a wake-up call for the software development lifecycle. Threat actors have moved b...
Healthcare Supply Chain Defense: Managing Risk in Outsourced Clinical Integration Environments
Introduction Mercy Health has recently contracted Melbourne-based Data Agility to provide 24/7 round-the-clock integration support for its c...
Google OSS Rebuild: Automating SLSA Provenance and Supply Chain Integrity for PyPI, npm, and Crates
Introduction Today, the Google Open Source Security Team (GOSST) announced OSS Rebuild, a strategic initiative designed to fortify the open ...
Zendesk Support Breach at Hims & Hers: Third-Party Supply Chain Defense
Introduction Telehealth giant Hims & Hers Health recently disclosed a significant data breach stemming from a compromise of its third-party ...
Mitigating Third-Party Risk: Strategies to Secure Your Supply Chain
Introduction The modern security perimeter is no longer defined by firewalls and castle walls; it is defined by the vendors you trust. For y...