Supply chain

Cybersecurity 5 min A Cyberattack on One Cold-Chain Operator Emptied KFC Japan's Shelves — the Cost of a Single Logistics Chokepoint Nichirei, Japan's largest cold-chain logistics operator, was hit by a cyberattack on 13 July. Containing it me... CY Cyber Team 20 Jul Cybersecurity 6 min A Nuclear Plant's Blueprints Leaked — but the Breach Was at a Contractor, Not the Reactor An extortion group posted files it claims come from a Kudankulam contractor's servers. India says no nuclear s... CY Cyber Team 20 Jul Developer Tools 6 min npm v12 Is Here, and It Turns Off a Default That Has Run Arbitrary Code for a Decade npm v12 went generally available on 8 July, flipping install scripts, Git dependencies and remote-URL packages... KE Kenji Tanaka 11 Jul Cybersecurity 7 min Miasma Returns With 'Phantom Gyp': npm Worm Sidesteps the Install-Script Defences Teams Just Deployed On 3 June, two days after the Red Hat npm compromise, the Miasma worm returned with a new delivery trick: a 15... CY Cyber Team 11 Jun Developer Tools 7 min Miasma: How a Hijacked CI Pipeline Shipped Malicious npm Packages With Valid Provenance The Miasma supply-chain attack didn't typosquat or steal an npm token — it hijacked a maintainer's CI pipeline... KE Kenji Tanaka 8 Jun Cybersecurity 12 min Laravel-Lang Supply Chain Attack — 233 Versions Backdoored Across 700 Repos in a Composer-Autoload Trick On 22 May 2026, an attacker rewrote version tags across the Laravel-Lang ecosystem to deliver a 5,900-line PHP... CY Cyber Team 22 May Cybersecurity 12 min Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside the Largest GitHub Actions Supply-Chain Attack on Record An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos between 18-21 May... CY Cyber Team 21 May Developer Tools 9 min Critical GitHub RCE Flaw CVE-2026-3854 Lets Attackers Execute Code With a Single Git Push — Patch Now CVE-2026-3854, a CVSS 9.8 RCE flaw in GitHub Enterprise Server, allows unauthenticated code execution via a si... CY Cyber Team 8 May ASEAN Tech 9 min Singapore's Semiconductor Firms Eye US Expansion as AI Boom Reshapes Global Chip Supply Chains Singaporean semiconductor companies are establishing US operations to capture AI chip supply chain opportuniti... JE Jeffrey Tan 8 May