Info Security Magazine
1 month, 3 weeks ago
Three-Quarters of Firms Knowingly Ship Vulnerable Code
AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers
Security news aggregator
Latest cybersecurity reporting from selected sources.
Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
11
headlines in this view
Refine the feed
Search across headline titles and summaries.
Volume over time
Weekly headline count for the current query.
Showing 11 most recent headlines
Filtered view
Info Security Magazine
5 months, 2 weeks ago
Two Critical Flaws in n8n AI Workflow Automation Platform Allow Complete Takeover
Pillar Security discovered two new critical vulnerabilities in n8n that could lead to supply chain compromise, credential harvesting and complete takeover attacks
Info Security Magazine
5 months, 2 weeks ago
DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon
DockerDash vulnerability allows RCE and data exfiltration via unverified metadata in Ask Gordon
Info Security Magazine
7 months, 2 weeks ago
Critical PickleScan Vulnerabilities Expose AI Model Supply Chains
3 critical zero-day flaws in PickleScan, affecting Python and PyTorch, allowed undetected attacks
Info Security Magazine
1 year, 5 months ago
Oracle To Address 320 Vulnerabilities in January Patch Update
Critical flaws include those in Oracle Supply Chain products
Info Security Magazine
1 year, 8 months ago
US Energy Sector Vulnerable to Supply Chain Attacks
45% of security breaches in the energy sector in the past year were third-party related, according to a report by Security Scorecard and KPMG
Info Security Magazine
2 years, 2 months ago
DBIR: Vulnerability Exploits Triple as Initial Access Point for Data Breaches
The growth of software supply chain attacks pushed vulnerability exploits to the third most used initial access method, Verizon found
Info Security Magazine
3 years, 2 months ago
ChatGPT Leveraged to Enhance Software Supply Chain Security
OX-GPT is designed to help quickly remediate security vulnerabilities during software development
Info Security Magazine
3 years, 8 months ago
Supply Chain Attacks or Vulnerabilities Experienced by 80% of Orgs, BlackBerry Finds
The report highlighted the enormous business costs of supply chain software attacks
Info Security Magazine
3 years, 9 months ago
350K Open-Source Projects At Risk of Supply Chain Vulnerability
The flaw resides in the tarfile module, automatically installed in any Python project
Info Security Magazine
4 years, 2 months ago
NIST Updates Supply Chain Cybersecurity Guidance
Updates advise organizations to consider vulnerabilities in components of products they're considering using