Menu

View

JournalDigital

Theme

LightDarkSystem

Text size

AAA

The paper in your inbox every morning

Straight from the source · Glossary

The Tech Gazette

Supply-chain attack

An attack through something a victim trusts and installs, such as a library, a build tool or an update, rather than on the victim directly.

Read more at en.wikipedia.org →

Learn it

1. Akamai Cloud (Linode)Oct 6, 2026Technical Guides
   How Akamai’s ExAR Capabilities Contained a LATAM Supply Chain Attack
2. Google CloudSep 24, 2026Technical Guides
   Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure

In the news

1. JetBrains · YouTubeOct 15, 2026Watch
   Building a Supply Chain Attack With .NET and NuGet | Maarten Balliauw | .NET Day 2026
2. AWS Security · IdentityOct 12, 2026Security Desk
   Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA
3. Unit 42Oct 7, 2026Security Desk
   Evolution of Web3 in Cloud Supply Chain Attacks
4. PyCon US · YouTubeOct 7, 2026Watch
   Breaking Bad (Packages): Why Traditional Vulnerability... - Shelby Cunningham and Madison Ficorilli
5. arXiv (systems & security) cs.CROct 5, 2026Research
   Backdooring Sparse Autoencoders
6. Cloudflare · YouTubeOct 4, 2026Watch
   Supply Chain Attacks in the SaaS Era: Unpacking the Drift Breach | Cloudflare x The CISO Signal
7. arXiv (systems & security) cs.CROct 1, 2026Research
   Autonomous OSS Threat Detection via Taxonomy-Aligned LLMs
8. ReversingLabsSep 30, 2026Security Desk
   Restrospective: How Malicious Updates Poison Your Environment
9. Aqua SecuritySep 30, 2026Security Desk
   Supply Chain Security Has the Operating Model Backwards
10. SocketSep 30, 2026Security Desk
    New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks
11. arXiv (systems & security) cs.CRSep 29, 2026Research
    Evaluating Whether GPT-6 Astra Performs Unsanctioned Supply-Chain Attacks
12. QualysSep 28, 2026Security Desk
    The Developer is the New Perimeter: How Supply Chain Attacks Are Becoming Cloud Breaches
13. OpenSSFSep 25, 2026Security Desk
    Case Study: How Does IBM Turn Open Source Participation Into Enterprise and Career Value?
14. OpenSSFSep 24, 2026Security Desk
    Inside the OpenSSF Summer Mentorship Showcase: How Emerging Developers Are Strengthening Supply Chain Security
15. SysdigSep 24, 2026Security Desk
    Why are SBOMs failing to stop supply chain attacks?
16. IncidentSocketSep 23, 2026Security Desk
    MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack