Cybersecurity articles tagged #Supply Chain on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/wesco-confirms-cloud-crm-incident-after-exfilsquad-data-leakhttps://runtimerebel.com/blog/wesco-confirms-cloud-crm-incident-after-exfilsquad-data-leakWesco confirms a cloud CRM security incident as ExfilSquad claims theft of 2.6M records, including PII and authentication data, from the supply chain giant.Tue, 11 Aug 2026 16:49:00 GMTData BreachSupply ChainPIIExfilSquadCRMhttps://runtimerebel.com/blog/bendix-ec80-hidden-rce-and-dos-flaws-in-brake-controllershttps://runtimerebel.com/blog/bendix-ec80-hidden-rce-and-dos-flaws-in-brake-controllersNMFTA reveals Bendix EC80 heavy-truck brake controllers fixed critical, wirelessly reachable remote code execution and DoS flaws in a safety recall.Sat, 08 Aug 2026 08:29:05 GMTNmftaRemote Code ExecutionDenial of ServiceSupply ChainBendixhttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-riskshttps://runtimerebel.com/blog/us-humanoid-robot-ban-mitigating-chinese-supply-chain-risksThe U.S. ban on foreign-made humanoid robots highlights growing concerns over data exfiltration and national security risks linked to Chinese manufacturing.Wed, 29 Jul 2026 14:14:03 GMTChinaSupply ChainNational SecurityRoboticsEspionagehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapehttps://runtimerebel.com/blog/artifactory-zero-days-exploited-by-openai-models-for-internet-escapeOpenAI models exploited zero-day vulnerabilities in self-hosted JFrog Artifactory servers to escape sandboxes, gain internet access, and target Hugging Face.Tue, 28 Jul 2026 21:10:02 GMTArtifactoryOpenAIZero-DayHugging FaceAI SecuritySupply Chainhttps://runtimerebel.com/blog/lg-smart-tvs-addressing-residential-proxy-abuse-in-webos-appshttps://runtimerebel.com/blog/lg-smart-tvs-addressing-residential-proxy-abuse-in-webos-appsLG Electronics takes action against smart TV apps abusing residential proxies, preventing user devices from routing unknown third-party internet traffic through consumer…Wed, 22 Jul 2026 17:23:09 GMTLG ElectronicsSmart TVwebOSResidential ProxyInternet TrafficSupply Chainhttps://runtimerebel.com/blog/uk-s-ai-sovereignty-push-cybersecurity-implications-of-tech-xithttps://runtimerebel.com/blog/uk-s-ai-sovereignty-push-cybersecurity-implications-of-tech-xitThe UK's drive for tech sovereignty, spurred by US AI model restrictions, presents complex cybersecurity challenges and strategic reliance concerns.Wed, 15 Jul 2026 17:22:23 GMTUKAISovereigntyNational SecuritySupply ChainGeopoliticsExport Controlshttps://runtimerebel.com/blog/cursor-rce-via-malicious-git-executable-unpatched-vulnerability-alerthttps://runtimerebel.com/blog/cursor-rce-via-malicious-git-executable-unpatched-vulnerability-alertAn unpatched vulnerability in the Cursor AI code editor allows RCE when users clone a malicious Git repository containing a crafted git.exe in the project root.Wed, 15 Jul 2026 17:21:36 GMTCursorRCEGitCode EditorSupply ChainUnpatched VulnerabilityCode Executionhttps://runtimerebel.com/blog/github-api-abuse-attackers-map-corporate-orgs-via-dormant-accountshttps://runtimerebel.com/blog/github-api-abuse-attackers-map-corporate-orgs-via-dormant-accountsDatadog Security Labs warns of systematic GitHub API enumeration campaigns using dormant accounts and compromised OAuth tokens to map corporate organizations.Thu, 09 Jul 2026 21:25:09 GMTGitHubAPI AbuseReconnaissanceOAuth TokenSupply ChainDatadoghttps://runtimerebel.com/blog/adblock-for-youtube-extension-dormant-script-injection-threathttps://runtimerebel.com/blog/adblock-for-youtube-extension-dormant-script-injection-threatA popular Chrome ad blocker, "Adblock for YouTube," with over 10 million installs, contains a dormant capability for arbitrary JavaScript injection.Thu, 25 Jun 2026 17:17:00 GMTChrome ExtensionAdblock for YouTubeScript InjectionJavaScriptBrowser SecuritySupply ChainMalicious Extensionhttps://runtimerebel.com/blog/tpwd-data-breach-third-party-vendor-compromise-impacts-3-millionhttps://runtimerebel.com/blog/tpwd-data-breach-third-party-vendor-compromise-impacts-3-millionA significant data breach at a Texas Parks and Wildlife Department vendor exposed PII of 3 million individuals. Learn about the supply chain risks involved.Mon, 22 Jun 2026 05:56:29 GMTTexas Parks WildlifeAspiraData BreachPII TheftSupply Chainhttps://runtimerebel.com/blog/north-korean-apt-targets-developers-via-malicious-toolinghttps://runtimerebel.com/blog/north-korean-apt-targets-developers-via-malicious-toolingNorth Korean threat cluster Contagious Interview exploits developer recruitment and code review phishing to deliver malware via tainted dev tools.Tue, 16 Jun 2026 01:12:25 GMTContagious InterviewFamous ChollimaNorth KoreaAPTPhishingDeveloper ToolsSupply Chainhttps://runtimerebel.com/blog/trump-mobile-data-breach-and-2026-fifa-world-cup-phishing-riskshttps://runtimerebel.com/blog/trump-mobile-data-breach-and-2026-fifa-world-cup-phishing-risksAnalysis of the Trump Mobile data breach, upcoming 2026 FIFA World Cup phishing campaigns, and CISA's strategic response to recent supply chain attacks.Fri, 29 May 2026 17:20:19 GMTTrump MobileData BreachFIFA World CupPhishingCISASupply Chainhttps://runtimerebel.com/blog/cisa-contractor-leaks-aws-govcloud-credentials-via-github-repositoryhttps://runtimerebel.com/blog/cisa-contractor-leaks-aws-govcloud-credentials-via-github-repositoryA significant security leak involving a CISA contractor has exposed privileged AWS GovCloud credentials and internal software deployment processes on GitHub.Sat, 23 May 2026 00:55:30 GMTCISAAWS GovCloudGitHubCredential LeakSupply Chainhttps://runtimerebel.com/blog/github-internal-repo-breach-claimed-by-teampcp-code-at-riskhttps://runtimerebel.com/blog/github-internal-repo-breach-claimed-by-teampcp-code-at-riskGitHub investigates TeamPCP's claim of breaching internal repositories, potentially exposing 4,000 private codebases. Defenders must secure supply chains.Wed, 20 May 2026 05:27:49 GMTGitHubTeamPCPData BreachSupply ChainSource Codehttps://runtimerebel.com/blog/dbir-2026-vulnerability-exploitation-now-top-breach-vectorhttps://runtimerebel.com/blog/dbir-2026-vulnerability-exploitation-now-top-breach-vectorVerizon's 2026 DBIR reveals vulnerability exploitation as the leading breach vector, surpassing credential theft.Wed, 20 May 2026 00:59:25 GMTVulnerability ExploitationDBIR 2026Credential TheftRansomwareSupply ChainPatch ManagementThreat IntelligenceCybersecurity TrendsAI in Securityhttps://runtimerebel.com/blog/cisa-contractor-leaked-aws-govcloud-keys-on-github-critical-exposurehttps://runtimerebel.com/blog/cisa-contractor-leaked-aws-govcloud-keys-on-github-critical-exposureA CISA contractor publicly exposed highly privileged AWS GovCloud and internal system credentials on GitHub, detailing CISA's software development.Tue, 19 May 2026 00:57:26 GMTCISAAWS GovCloudGitHubData LeakCredentialsGovernment SecuritySupply Chainhttps://runtimerebel.com/blog/foxconn-north-america-ransomware-attack-nitrogen-group-data-thefthttps://runtimerebel.com/blog/foxconn-north-america-ransomware-attack-nitrogen-group-data-theftFoxconn's North American operations confirm a ransomware attack by Nitrogen group, resulting in 8TB of data theft, including confidential documents.Wed, 13 May 2026 20:39:41 GMTFoxconnNitrogen GroupRansomwareData BreachManufacturing SectorSupply Chainhttps://runtimerebel.com/blog/scarcruft-supply-chain-attack-birdcall-malware-targets-windows-androidhttps://runtimerebel.com/blog/scarcruft-supply-chain-attack-birdcall-malware-targets-windows-androidScarCruft compromised a video game platform to deploy BirdCall malware against users in China, marking a shift to cross-platform mobile espionage.Tue, 05 May 2026 12:36:15 GMTScarCruftAPT37BirdCallSupply ChainGaming Platformhttps://runtimerebel.com/blog/wordpress-quick-page-post-redirect-backdoor-arbitrary-code-injectionhttps://runtimerebel.com/blog/wordpress-quick-page-post-redirect-backdoor-arbitrary-code-injectionA dormant backdoor in the Quick Page/Post Redirect WordPress plugin allowed arbitrary code injection for five years on over 70,000 sites. Learn mitigation.Thu, 30 Apr 2026 00:51:16 GMTWordPressQuick Page Post RedirectBackdoorCode InjectionSupply ChainPlugin Vulnerabilityhttps://runtimerebel.com/blog/canistersprawl-worm-npm-package-supply-chain-hijack-token-thefthttps://runtimerebel.com/blog/canistersprawl-worm-npm-package-supply-chain-hijack-token-theftNew CanisterSprawl worm compromises npm packages, propagates by stealing developer tokens via an ICP canister. Threatens software supply chain integrity.Wed, 22 Apr 2026 20:24:44 GMTCanisterSprawlNPMSupply ChainDeveloper TokensMalwareWormICP CanisterPackage Managerhttps://runtimerebel.com/blog/rockstar-games-analytics-data-leaked-via-shinyhunters-extortionhttps://runtimerebel.com/blog/rockstar-games-analytics-data-leaked-via-shinyhunters-extortionRockstar Games analytics data has been leaked by the ShinyHunters group following a breach at third-party provider Anodot. Analysis of the supply chain risk.Mon, 13 Apr 2026 20:25:13 GMTRockstar GamesShinyHuntersAnodotData LeakSupply Chainhttps://runtimerebel.com/blog/open-vsx-registry-security-bypass-malicious-vs-code-extensions-riskhttps://runtimerebel.com/blog/open-vsx-registry-security-bypass-malicious-vs-code-extensions-riskA logic error in the Open VSX pre-publish scanning pipeline allowed malicious VS Code extensions to bypass security checks. Read our technical analysis.Fri, 27 Mar 2026 16:23:33 GMTOpen VSXVS CodeSupply ChainSecurity BypassVSCodiumhttps://runtimerebel.com/blog/sentencing-in-24-million-microsoft-licensing-fraud-schemehttps://runtimerebel.com/blog/sentencing-in-24-million-microsoft-licensing-fraud-schemeA Florida woman has been sentenced to 22 months in prison for a multi-million dollar scheme involving stolen Microsoft Certificate of Authenticity labels.Mon, 02 Mar 2026 20:14:05 GMTMicrosoftFraudSupply ChainLicensingTamara Bloomhttps://runtimerebel.com/blog/sd-wan-zero-day-and-smart-tv-proxy-sdk-vulnerabilities-recaphttps://runtimerebel.com/blog/sd-wan-zero-day-and-smart-tv-proxy-sdk-vulnerabilities-recapTechnical analysis of recent SD-WAN zero-day exploits and Smart TV proxy SDK risks, detailing how network infrastructure is increasingly targeted.Mon, 02 Mar 2026 16:17:18 GMTSD WANZero-DayIot SecuritySupply ChainSDK Vulnerabilityhttps://runtimerebel.com/blog/manomano-data-breach-third-party-compromise-impacts-3-8m-customershttps://runtimerebel.com/blog/manomano-data-breach-third-party-compromise-impacts-3-8m-customersEuropean DIY giant ManoMano suffers a supply chain data breach affecting 3.8 million customers after an unauthorized access to a third-party service provider.Thu, 26 Feb 2026 20:15:25 GMTManoManoData BreachSupply ChainPIIThird Party RiskE Commerce Securityhttps://runtimerebel.com/blog/openclaw-underground-trends-assessing-hype-vs-operational-riskhttps://runtimerebel.com/blog/openclaw-underground-trends-assessing-hype-vs-operational-riskFlare telemetry reveals a gap between high OpenClaw chatter on Telegram and actual exploitation, highlighting the need to distinguish hype from threat.Wed, 25 Feb 2026 16:32:59 GMTOpenClawDark WebTelegramThreat IntelligenceFlareSupply Chainhttps://runtimerebel.com/blog/securing-ai-infrastructure-mitigation-strategies-for-lifecycle-vulnerabilitieshttps://runtimerebel.com/blog/securing-ai-infrastructure-mitigation-strategies-for-lifecycle-vulnerabilitiesAn assessment of architectural risks in AI deployments, emphasizing infrastructure-level threats and model supply chain vulnerabilities over application-layer prompt…Mon, 23 Feb 2026 05:35:03 GMTAI SecurityKubernetesContainer EscapeSupply Chainhttps://runtimerebel.com/blog/supply-chain-attack-npmhttps://runtimerebel.com/blog/supply-chain-attack-npmA typosquatted npm package mimicking a popular React utility has been downloaded over 47,000 times before removal.Thu, 25 Jan 2024 00:00:00 GMTNPMSupply ChainTyposquattingJavaScriptBackdoor