Supplychainsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Toni Antunovic

Jun 11

Miasma Worm: How Opening a Repo in Claude Code Became a Credential Theft Vector

#security #supplychainsecurity #claudecode #devsecops

9 min read

Toni Antunovic

Jun 9

The Gemini CLI CVSS 10 Attack: How a GitHub Issue Became a Supply Chain Weapon

#security #promptinjection #supplychainsecurity #devsecops

6 min read

Uhltak Therestismysecret

Jun 4

Supply Chain Attacks: Schutz vor bösartigen Abhängigkeiten im IT-Betrieb

#supplychainsecurity #abhaengigkeiten #devsecops #softwaresupplychain

5 min read

Sri Sai Venkata Kasi Subbarayudu Kompella

Jun 8

Signing Container Images with Cosign

#supplychainsecurity #kubernetes #containers #security

15 min read

Daniel Westgaard

Jun 2

The CRA's 24-hour clock is a cross-repo question. Your SBOM answers a different one.

#cra #sbom #supplychainsecurity #infrastructure

12 min read

Jay Grider

May 21

Socket: Secure Your JavaScript Supply Chain Against AI Threats

#supplychainsecurity #javascript #aithreats #sbom

6 min read

Toni Antunovic

May 14

What LucidShark Would Have Caught Before the TanStack Attack Landed

#supplychainsecurity #sca #tanstack #devsecops

7 min read

Toni Antunovic

May 16

Clinejection: When Your AI Coding Tool Became the Weapon

#promptinjection #supplychainsecurity #devsecops #githubactions

9 min read

Toni Antunovic

May 21

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

#slopsquatting #supplychainsecurity #aicodingagents #npmsecurity

10 min read

SnykSec for Snyk

Apr 29

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

#supplychainsecurity #python #kubernetes #docker

9 min read

Toni Antunovic

Apr 28

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

#supplychainsecurity #aicode #npm #security

8 min read

DevOps Start

Apr 28

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

#supplychainsecurity #artifactprovenance #slsaframework #devsecopspipeline

8 min read

DevOps Start

Apr 20

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

#githubactionssecurity #oidcauthentication #cicdhardening #supplychainsecurity

7 min read

Apr 20

How Attackers Turned Trivy Into a Weapon Against Cisco

#supplychainsecurity #threatintelligence #shinyhunters #ciscobreach

4 min read

Apr 20

Cisco's Source Code Breach Was Structural, Not Accidental

#cybersecurity #databreach #supplychainsecurity #secretsmanagement

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# supplychainsecurity

Miasma Worm: How Opening a Repo in Claude Code Became a Credential Theft Vector

The Gemini CLI CVSS 10 Attack: How a GitHub Issue Became a Supply Chain Weapon

Supply Chain Attacks: Schutz vor bösartigen Abhängigkeiten im IT-Betrieb

Signing Container Images with Cosign

The CRA's 24-hour clock is a cross-repo question. Your SBOM answers a different one.

Socket: Secure Your JavaScript Supply Chain Against AI Threats

What LucidShark Would Have Caught Before the TanStack Attack Landed

Clinejection: When Your AI Coding Tool Became the Weapon

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

How Attackers Turned Trivy Into a Weapon Against Cisco

Cisco's Source Code Breach Was Structural, Not Accidental