Maritime Chokepoints · Nov 7, 15:20 UTC
355 vessels across 8 chokepoints, last 30 min; 2 unusual:
• Malacca & Singapore: 226 vessels, 253% above its usual
• Strait of Gibraltar: 116 vessels, 38% above its usual
• Turkish Straits: 12 vessels (5 tankers)
#supplychain — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #supplychain, aggregated by home.social.
-
-
Claude Code Exposes Thousands of Secrets in Public GitHub Repositories
Thousands of sensitive secrets, including passwords, tokens, and keys, have been exposed in public GitHub repositories due to a setting in Anthropic's AI coding assistant, Claude Code. A simple "yes" to a prompt can save sensitive information in plain text, making it easily accessible to anyone.
#AiCodingAssistant #PublicGithub #SecretExposure #SupplyChain #EmergingThreats
-
Maritime Chokepoints · Nov 7, 03:20 UTC
678 vessels across 8 chokepoints, last 30 min; 1 unusual:
• Malacca & Singapore: 564 vessels, 810% above its usual
• Strait of Gibraltar: 94 vessels (21 tankers)
• Turkish Straits: 15 vessels (6 tankers) -
Hackers Disrupt Europe's Refrigeration Systems in Coordinated Attacks
In a shocking series of coordinated attacks, hackers infiltrated refrigeration systems across Europe, causing hundreds of supermarkets to discard spoiled food after malicious actors remotely triggered defrost mode on vulnerable controllers. The calculated strikes, which hit over 800 retail locations in 11…
#Europe #RefrigerationSystemsAttacks #SupplyChain #EmergingThreats #OperationalDisruption
-
[#TRADESHOW] #China #Chaoshan #International #Textile and #Garment #Exhibition 2027 (CTGE 2027) will be held from March 18 to 20, 2027, at #Shantou International #Convention and Exhibition #Center. #Platform #event for the textile, garment, #lingerie, #underwear, #apparel #manufacturing, and #fashion #SupplyChain industries. #Expo combines #sourcing, #brand promotion, fashion #shows, #industry #forums, product launches, #business #matchmaking, and #cultural activities. https://chinaexpohub.com/event/ctge-2027-shantou-textile-garment-exhibition/
-
Doctor Web reports malicious GitHub projects posing as security scanners, test automation and log parsers. Payloads hidden in Visual Studio project files, Python and Go can lead to AsyncRAT and data theft. Researchers count over 2,000 infected Windows PCs across the campaign. Inspect build hooks, verify maintainers and isolate unfamiliar tools before execution.
-
Oktober 2026: PHP2Shell, Brotli-RCE, Japan im Cyber-Notstand, 6,3 Mrd. $ bei Binance. 🧵
Mein Fazit: Das Problem sitzt tief in Lieferketten und Entwickler-Laptops, "Patch-First" allein reicht nicht mehr. Was SBOM/VEX, Egress-Filtering & Co. jetzt bringen:
https://d13n.net/blog/black-october/#InfoSec #PHP2Shell #Brotli2shell #SupplyChain #DevOps #Binancehack
-
WordPress Sites Exposed During Fix Installation for Exploited Flaw
A recent security fix for a WordPress flaw may have inadvertently exposed some sites to attack, according to researcher Umut Bayram, who discovered the bug. The vulnerability, tracked as CVE-2026-119977, affects WordPress versions 4.7 through 7.1.3.
#Wordpress #Cve2026119977 #SupplyChain #Vulnerability #EmergingThreats
-
This Week in Security: More Linux Bugs, Biggest Crypto Theft Ever, Prusa Printers, Residential Proxies
-
Maritime Chokepoints · Nov 6, 15:20 UTC
396 vessels across 8 chokepoints, last 30 min; 3 unusual:
• Malacca & Singapore: 255 vessels, 311% above its usual
• Strait of Gibraltar: 120 vessels, 46% above its usual
• Turkish Straits: 17 vessels, 31% above its usual -
Il force-push che ruba criptovalute: dentro l’attacco a antd-img-crop e lo stealer OverLord
Un force-push su GitHub ha trasformato la libreria React antd-img-crop in un vettore per OverLord, uno stealer cross-platform che svuota wallet crypto e credenziali di sviluppo, senza mai toccare il pacchetto pubblicato su npm. -
D-Link Discloses Zero-Days in Managed Switches
D-Link has uncovered critical zero-day vulnerabilities in its DGS-3130 series managed switches, used by small-to-medium businesses and metro Ethernet deployments, which could leave them open to attack. The flaws, attributed to researcher Giresh Kumar, affect multiple firmware versions and involve the D-Link Discovery Protocol and firmware security components.
#ZeroDay #Dlink #ManagedSwitches #SupplyChain #EmergingThreats
-
Chainguard Disrupts Vulnerability Disclosure with AI-Driven Flood of Findings
Imagine uncovering over 40,000 vulnerabilities, with 42% being critical or high-priority, across 500 projects - and swiftly resolving them with over 2,000 patches produced. Starting September 28, Chainguard will begin publicly disclosing these findings, kicking off with a batch of 50 quietly fixed…
#VulnerabilityDisclosure #AidrivenSecurity #SupplyChain #EmergingThreats #Chainguard
-
A critical issue is unfolding in Switzerland: shortages affecting more than 700 common medicines are creating real challenges for healthcare delivery and supply-chain resilience. Our latest article examines root causes, stakeholder responses, and steps needed to stabilize the situation.
Read the full analysis: https://wix.to/fnp7knV
#Policy
#SupplyChain
#PatientSafety
#Pharmaceuticals
#HealthcareManagement -
https://www.europesays.com/3355832/ The impact of the global supply chain crisis #GlobalSupplyChain #GlobalSupplyChainShock #SupplyChain
-
https://www.europesays.com/3355550/ Indonesia’s Bio Farma Eyes Regional Hub Role in World’s Most-Watched TB Vaccine Supply Chain #BioFarma #GlobalSupplyChain #GlobalSupplyChainShock #M72/AS01E #StopTBPartnership #SupplyChain #TbVaccine #Tuberculosis #VaccineManufacturing #VaccineSupplyChain #WHO
-
Maritime Chokepoints · Nov 6, 03:20 UTC
187 vessels across 8 chokepoints, last 30 min; 1 unusual:
• Turkish Straits: 26 vessels, 136% above its usual
• Strait of Gibraltar: 82 vessels (25 tankers)
• Malacca & Singapore: 68 vessels (14 tankers) -
https://www.europesays.com/3355273/ The Impacts of Supply Chain Disruptions on Inflation #GlobalSupplyChain #GlobalSupplyChainShock #SupplyChain
-
https://www.europesays.com/unitedstates/97554/ Supply Chain Bottlenecks & Strikes: The Week in Automotive #AutomotiveIndustry #CANACAR #CrossBorderTrade #Customs #DriverShortage #Electromobility #FleetLeasing #FreightTransport #HybridVehicles #JustInTime #logistics #Mexico #nearshoring #NorthAmerica #OEMs #StateOfMexico #strikes #SupplyChain #SupplyChains #Telemetry #Tier1Suppliers #Trade #Trade&SupplyChains
-
Supply chain attack: BO Team in a software developer's infrastructure
In June 2025, a software developer detected suspicious SMB connection attempts, revealing a sophisticated compromise by the Black Owl (BO Team) APT group. Attackers seized nearly all infrastructure components including domain controllers, servers, virtual environments, Ansible orchestration, backups, and security systems. They exploited CVE-2021-44228 (Log4Shell) on VMware vCenter, compromised hypervisors using stolen SSH keys, and infiltrated both Windows and Linux infrastructures through credential theft and brute-force attacks. Evidence suggests attackers aimed to inject malicious code into the developer's software products to enable supply chain attacks against customers. The attackers maintained persistent access for several months using custom backdoors, but the operation was detected before completion, preventing potential widespread compromise of downstream organizations.
Pulse ID: 6aec5fe933b8cac0f8ed7334
Pulse Link: https://otx.alienvault.com/pulse/6aec5fe933b8cac0f8ed7334
Pulse Author: AlienVault
Created: 2026-11-05 10:52:25Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#SupplyChain #CVE202144228 #BruteForce #Credential #OTX #AlienVault
-
Chainalysis Breach Exposes Law Enforcement Tokens, Heightens Security Concerns
A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data such as user IDs, full names, and email addresses. The incident has prompted some users to change their passwords, but details on the vulnerability of the password…
#DataBreach #Chainalysis #LawEnforcement #SupplyChain #EmergingThreats
-
https://www.europesays.com/3354992/ Bringing highland agricultural products to the global value chain: Logistics links need to be connected. #AgriculturalProducts #CentralAndCentralHighlandsMarkets #Economy #GlobalSupplyChain #GlobalSupplyChainShock #local #LogisticsServices #RawMaterials #SupplyChain #VietnamLogisticsForum
-
[#TRADESHOW] #China #Chaoshan #International #Textile and #Garment #Exhibition 2027 (CTGE 2027) will be held from March 18 to 20, 2027, at #Shantou International #Convention and Exhibition #Center. #Platform #event for the textile, garment, #lingerie, #underwear, #apparel #manufacturing, and #fashion #SupplyChain industries. #Expo combines #sourcing, #brand promotion, fashion #shows, #industry #forums, product launches, #business #matchmaking, and #cultural activities. https://chinaexpohub.com/event/ctge-2027-shantou-textile-garment-exhibition/
-
Zyxel Patch Fails to Eradicate Switch Flaw
A recent security patch for Zyxel GS1900 switches failed to fully address a critical flaw, leaving 996 devices in 48 countries vulnerable to attacks that can allow hackers to run operating system commands with root privileges. The incomplete fix comes after a September report revealed widespread compromise of these switches.
#Zyxel #Cve2026107441 #SupplyChain #FirmwareSecurity #Vulnerability
-
Maritime Chokepoints · Nov 5, 15:20 UTC
149 vessels across 8 chokepoints, last 30 min; 3 unusual:
• Turkish Straits: 22 vessels, 100% above its usual
• Malacca & Singapore: 20 vessels, 68% below its usual
• Strait of Gibraltar: 103 vessels, 56% above its usual -
https://www.europesays.com/3354708/ Global Supply Chain Pressures and U.S. Inflation #GlobalSupplyChain #GlobalSupplyChainShock #SupplyChain
-
https://www.europesays.com/3354427/ IEAE Hanoi 2026 connects global supply chains #BUSINESSES #electronics #GlobalSupplyChain #GlobalSupplyChainShock #IEAEHanoi2026 #SmartAppliances #SupplyChain #SupplyChains #VietnamInternationalElectronics&SmartAppliancesExpo
-
“Don’t panic,” Govt assures stable essential goods supply amid geopolitical tensions, monsoon threat | Malaysia https://www.byteseu.com/2499145/ #ArmizanMohdAli #CostOfLiving #EssentialGoods #GeopoliticalTensions #Geopolitics #kpdn #MonsoonSeason #mten #PanicBuying #PriceStability #SupplyChain #SupplySecurity #WestAsiaConflict
-
Zyxel GS1900 Switches Exposed to Zero-Day Exploit Despite Earlier Fix
A recent zero-day exploit has left hundreds of Zyxel GS1900 switches vulnerable to data theft, despite a supposed earlier fix, with researchers discovering that many devices remained exposed. This shocking revelation comes after a series of discoveries by GreyNoise and Binarly, highlighting a concerning security gap.
#ZeroDay #ZyxelGs1900 #Cve20267273 #SupplyChain #EmergingThreats
-
https://www.europesays.com/3354160/ “Don’t panic,” Govt assures stable essential goods supply amid geopolitical tensions, monsoon threat | Malaysia #ArmizanMohdAli #BreakingNews #CostOfLiving #EssentialGoods #GeopoliticalTensions #kpdn #MonsoonSeason #mten #PanicBuying #PriceStability #SupplyChain #SupplySecurity #WestAsiaConflict
-
https://www.europesays.com/3354154/ COVID Tested Global Supply Chains. Here’s How They’ve Adapted #GlobalSupplyChain #GlobalSupplyChainShock #SupplyChain
-
Export control evasion: Illicit workshops in China are reportedly harvesting HBM3E memory from packaged logic chips to circumvent US restrictions.
By utilizing heat to disassemble the chips, they isolate the memory stacks, which are allegedly trading at roughly $4,000 each on the black market.
Researchers note that this process has high failure rates due to thermal damage.
While manufacturers like Samsung and SK hynix st…
-
Maritime Chokepoints · Nov 5, 03:20 UTC
141 vessels across 8 chokepoints, last 30 min; 2 unusual:
• Strait of Gibraltar: 93 vessels, 55% above its usual
• Malacca & Singapore: 32 vessels, 48% below its usual
• Turkish Straits: 13 vessels (7 tankers) -
Zyxel Discloses Zero-Day Flaw Exploited in 1,000 Network Switch Hacks
A zero-day flaw in Zyxel GS1900 network switches has been exploited in a massive hack, compromising 996 devices across 48 countries in a months-long intrusion campaign. The vulnerability, now patched, allowed attackers to execute operating-system commands with just a specially crafted HTTP request.