Supply Chain Security Stories

Global Stories

Supply Chain Security stories

Palo Alto warns on 22 million exposed PHP instances

Security teams face a wider attack surface, as Palo Alto Networks says the PHP flaws could leave 22 million internet-facing instances exposed worldwide.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday

Malware

Recorded Future warns of rising Magecart attacks & exploits

Online checkout systems face greater risk as attackers increasingly hide skimming code inside trusted payment tools and services.

By Sofiah Nichole Salivio • 4 min read • Yesterday

Internet of Things

Europe energy groups warn cyber rules lag behind risk

Attackers could exploit gaps in connected energy devices and grid links unless utilities, manufacturers and regulators improve practical resilience, experts said.

By Sofiah Nichole Salivio • 4 min read • Yesterday

Robotics

Boards urged to tighten AI & identity cyber oversight

Boards are being warned that AI, identity and software supply chain gaps are outpacing controls, leaving organisations more exposed to fast-moving attacks.

By Mara Sugue • 5 min read • Last week

Cloud Security

RapidFort links hardened container images with Wiz

Joint customers can now see RapidFort's remediation guidance inside Wiz, helping them triage container CVEs without changing scanning workflows.

By Joseph Gabriel Lagonsin • 4 min read • Last week

AI Security

SpecterOps & OpenAI launch AI security training course

Security teams facing new risks from generative AI can now take eight hours of hands-on training on prompt injection and jailbreaks.

By Joseph Gabriel Lagonsin • 3 min read • Last week

Manufacturing

PCA Cyber Security launches CERVUS for device risk

Manufacturers face tighter compliance pressure as the new platform maps vulnerabilities to specific devices, components and SBOMs for quicker remediation.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Disaster Recovery

'Cybersecurity birth certificate': Rockwell Automation's OT risk measures

Rising attacks on connected factories are pushing regulators to require proof of security from shipment through service, Rockwell says.

By Donovan Jackson • 4 min read • Last week

Software-as-a-Service

BlueVoyant appoints John Hultman as chief revenue officer

The appointment comes as BlueVoyant scales its sales push around Microsoft-linked security tools and AI after a solid third quarter.

By Joseph Gabriel Lagonsin • 3 min read • This month

DevOps

GitLab unveils governed software factory tools for AI

The new tools are meant to help large organisations control AI-driven coding, security and deployment as software moves from idea to production.

By Raphael Veloso • 5 min read • This month

Cloud Security

CrowdStrike & CyberCert back SMB1001 for small firms

Small businesses could gain easier access to cyber protection and certification as the partnership bundles Falcon monitoring with SMB1001 support.

By Joseph Gabriel Lagonsin • 3 min read • This month

Malware

Cycode launches workstation protection for developers

Malicious packages can now be blocked before they reach developers' machines, as supply chain attacks shift into AI-assisted coding workflows.

By Joseph Gabriel Lagonsin • 4 min read • This month

Cloud Security

Google Cloud adds tighter code ownership & private CI/CD

Software supply chain controls tighten as Google Cloud lets teams limit approvers by file and keep CI/CD traffic inside private networks.

By Mara Sugue • 3 min read • This month

Stories from Other Regions

Supply Chain Security stories

Quantum Computing

RapidFort signs SpaceWERX deal on Space Force cyber

The deal should help the Space Force speed software approvals and harden space systems against AI-driven and post-quantum cyber threats.

By Mara Sugue • 4 min read • Yesterday

Disaster Recovery

UK organisations hit harder by cyberattacks on operations

UK firms are seeing more cyber incidents disrupt production, with 65% reporting operational impact in the past year, the highest among markets surveyed.

By Mara Sugue • 5 min read • 2 days ago

Supply Chain

IBM & Red Hat launch Lightwell to fix open source flaws

Businesses can now request patches for vulnerable Java dependencies, after Lightwell has already fixed more than 400 unknown flaws in open source code.

By Mara Sugue • 3 min read • 2 days ago