thehackernews.com
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Two men charged in Australia for alleged role in TeamPCP cybercrime group, which compromised open-source security scanners and AI gateway.
Supply Chain Attacks
Stories tagged “Supply Chain Attacks.”
3 stories
bleepingcomputer.com
Who Vets AI's Code? The Scale Challenge Facing Open Source Ingestion
The article discusses the challenge of vetting AI code, particularly in open-source software, due to the rapid generation of dependencies by AI coding assistants. This has led to a vulnerability known as slopsquatting, where attackers register dummy package names on publi…
bleepingcomputer.com
GitHub, PyPI add time-absed defenses against supply chain attacks
GitHub and PyPI have introduced time-based defenses against supply-chain attacks. Dependabot now has a 72-hour cooldown, and PyPI rejects new files uploaded to releases older than 14 days.