An AI Agent Breached Hugging Face — and Machine-Speed Attacks Stopped Being a Demo
Hugging Face confirmed that an attacker chained two code-execution flaws in its dataset pipeline, stole cloud credentials, moved laterally into intern...
supplyChain
4 articles on supplyChain.
The Guards Left the Keys Out: CISA's GitHub Leak, a Worm in the npm Supply Chain, and the County That Paid $1M in Secret
This week's ledger is about guardians failing at their own jobs. CISA — the agency that lectures America on credential hygiene — published a postmorte...
One Zero-Day, a Dozen Victims: The Oracle Breach Wave Hits Insurance Regulators, Nissan, and 9 Million Medtronic Patients
ShinyHunters exploited a zero-day in Oracle's enterprise software and the disclosures are now landing in a wave: America's insurance regulators lost 3...
Your Developer Tools Are the Attack Surface: The Vercel Breach and the AI Supply Chain Problem
Vercel — the platform hosting millions of web applications — was breached through a chain that started with an infostealer on an employee of an AI com...