supply chain attacks

Two Australians charged over TeamPCP supply chain cyberattacks targeting 1,000 organizations

Australian Federal Police have arrested two Western Australian men accused of being members of TeamPCP, a cybercrime group blamed for what authorities describe as one of the most prolific software supply chain attack campaigns on record. The pair face a…

North Korea denies role in npm attacks after 11-nation alert

A pair of newly disclosed campaigns illustrate how North Korean hacking groups are escalating their attacks on the open-source software ecosystem, compromising widely used JavaScript packages and leveraging blockchain technology to conceal malware infrastructure.

Amazon links North Korean group to four open-source software attacks

Amazon Amazon.com, Inc. disclosed Wednesday that a North Korean hacking group carried out a coordinated campaign against open-source software packages, connecting four separate compromises that security researchers had previously treated as isolated incidents.