Tag: Supply Chain Attack
-
ConnectWise Cloud Backup Breach: How Attackers Skipped MFA and Targeted 2,250 Microsoft 365 Tenants
A stolen vendor app credential let attackers walk into Microsoft 365 tenants without a single MFA prompt. Here’s how to check if you’re affected.
-
LiteLLM 1.107.0 on PyPI Is Malicious: How to Check Your Systems and What to Rotate
A poisoned LiteLLM release on PyPI steals SSH keys, cloud secrets and AI tokens. Here is how to check if you pulled it and what to do next.
-
MALFEX npm Malware Hid for Years: The 8 Packages to Check For in Your Projects
Eight npm packages carried Windows malware for years, and three were still installable in late September. Here’s the one-line check to run today.