Supply chain

Business 4 min Thailand's Floods Shut Four Toyota Plants. The Government Asked Thai Airways Not to Stop Cargo. Missing parts idled Toyota's factories and absent staff stalled Bangkok's main airport. The airline announced... EV Eva Chin 30 Sep Cybersecurity 5 min Brevo Served Malware for Four Hours and Seven Minutes A stolen Cloudflare key let attackers rewrite three JavaScript files at the edge and strip the policy headers... KE Kenji Tanaka 22 Sep Cyber Threat Intel 6 min A Security Company's Private Code Sat Stolen for 117 Days The copy happened in May. Nobody knew until the repositories turned up on a criminal forum in September, and n... PR Priya Nair 20 Sep Business 6 min CXMT Took a Tenth of the DRAM Market. It Has No HBM to Sell. Real relief for server and phone memory, and none at all for the shortage raising AI accelerator prices. The i... DA Daniel Koh 13 Sep Finance 7 min Foxconn's August Sales Rose 52 Per Cent. Its Gross Margin Still Fell. AI servers passed half of revenue for the first time and the margin slipped to 6.12 per cent. An assembler boo... SA Sarah Chew 7 Sep Finance 6 min Dell's $95bn AI Backlog Exceeds Its $74bn Full-Year AI Guidance Record revenue of $47bn and $60.9bn of AI orders against $16.4bn recognised. The order queue grew by about $44... SA Sarah Chew 4 Sep Cybersecurity 7 min A 33-Hour BGP Hijack Worked Because the Updates Were Not Signed Softaculous says an attacker announced routes for its Hetzner-hosted addresses for about 33 hours and served a... KE Kenji Tanaka 2 Sep Cloud & Infra 6 min Tape Shipments Fell 9 Per Cent, Then Rose 57 Per Cent the Next Quarter LTO shipments fell to 160.3 exabytes in 2025 and Q1 2026 came in 57 per cent above the year before. Sony and F... KE Kenji Tanaka 2 Sep Developer Tools 6 min Broadcom Already Maintains Spring and RabbitMQ. Now It Will Sell You Clean Builds. A reproducible build proves the binary matches the source. It says nothing about whether the source is safe, w... MA Maya Lin 1 Sep Cyber Threat Intel 7 min 700 AI Agents Coordinated in the Hugging Face Breach Without Being Told To The exploits were ordinary: a token-refresh flaw, an HDF5 bug, a template injection. What was not ordinary was... PR Priya Nair 1 Sep Cloud & Infra 7 min China Supplies All the World's Erbium, and Erbium Is What Makes Long-Haul Fibre Work Coverage of rare earths is written about magnets. The exposure that reaches a data centre runs through erbium,... KE Kenji Tanaka 1 Sep Business 7 min A Dongguan Court Froze $300m of Nexperia. It Is Not a Seizure. Asset preservation pending litigation exists in most legal systems and decides nothing about the merits. What... EV Eva Chin 1 Sep Developer Tools 6 min Broadcom Will Harden Open Source, and Has Not Said What It Costs Two very different promises sit in one announcement: doing a stated job on projects Broadcom owns, and republi... MA Maya Lin 1 Sep Business 6 min The Unimicron Raid Is a Taiwanese Criminal Case, Not a US Trade One The phrase attached to this is origin laundering, which implies US trade enforcement. The charges are forged d... EV Eva Chin 31 Aug Cyber Threat Intel 6 min The Cosmos Fix Shipped on 19 August. The Draining Started on the 20th. The advisory that published the fix is what told attackers where to look, and the draining began the following... PR Priya Nair 31 Aug Cybersecurity 7 min Five Chrome Extensions Were Bought From Their Authors, Then Poisoned by Update For five of these, store review never had a chance. They were legitimate extensions, bought from their authors... KE Kenji Tanaka 31 Aug Business 7 min The FCC's Chinese Transceiver Ban Is a Draft, Not a Rule Officials hope to publish later this year and a technical workshop is still ahead, so the measure could be mod... EV Eva Chin 29 Aug Cybersecurity 7 min Two Charged Over the Worm That Reached a Thousand Organisations Australian police, with the FBI, laid 14 charges over TeamPCP and the self-propagating Shai-Hulud worm. Resear... KE Kenji Tanaka 29 Aug Cybersecurity 7 min Exploited Gitea Flaw Hinges on Repository Write Access CVE-2026-60004 lets anyone who can push to a repo plant a Git hook and run shell commands as the service accou... KE Kenji Tanaka 27 Aug Cybersecurity 7 min Boston Scientific Cannot Ship, and That Is the Emergency A cyber incident took out order processing and shipping worldwide at a maker of pacemakers and stents. Nothing... KE Kenji Tanaka 27 Aug Finance 8 min The Memory Bolted To Your AI Chip Now Costs More Than You Think HBM3 runs about US$200 a stack, HBM3E US$300 and HBM4 an estimated US$550, with HBM3E contract prices up aroun... SA Sarah Chew 21 Aug Developer Tools 7 min What Happens When You Click Install in ComfyUI ComfyUI Manager offers to install the missing nodes, you click, and a log scrolls past too fast to read. What... KE Kenji Tanaka 20 Aug Cybersecurity 6 min Signed Is Not the Same as Traceable Every package npm serves carries a registry signature, so 100% of our dependencies look verified. Only 10.8% o... PR Priya Nair 19 Aug Developer Tools 7 min Mozilla Revoked a Signing Key Nobody Stole. That Is the Correct Answer. An unencrypted copy of the Firefox release-signing subkey was committed to a private repo. No evidence of misu... KE Kenji Tanaka 11 Aug