Ledger’s Spy-Chip Attack: What We Know So Far

Ledger, one of the most popular hardware wallet manufacturers, suffered a sophisticated supply chain attack. This is what we ...
The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.
Help Net Security

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.

LiteLLM supply chain attack hoovers up passwords and secrets

PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...
Tom's Hardware on MSN

China-aligned hackers deploy AI agents in massive ConnectWise supply chain attack

Microsoft says China-aligned Storm-0940 used the ARTEX AI agent framework in the ConnectWise Cloud Backup supply chain attack ...
Crypto Briefing

Ledger supply-chain attack drains over 60 BTC from wallet tied to alleged crypto scammer

A Ledger supply-chain attack via reseller CryptoBilis drained over 60 BTC worth $4.8 million from a wallet tied to an alleged ...
CyberScoop

Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

What is a Supply Chain Attack? Measures Required for Small and Medium-Sized Enterprises (SMEs) and the SCS Evaluation System [2026]

Key Points of This Article In the IPA's "10 Major Information Security Threats 2026," "attacks targeting supply chains and ...
Ars Technica

Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden

It has been a bad six weeks for security firm Checkmarx. Over the past 40 days, it has been the victim of at least one supply-chain attack that delivered malware to customers on two separate occasions ...