#supplychaincompromise — Public Fediverse posts on home.social

Analyst207 @[email protected] · 2026-05-11 · 22:30 UTC

UK Water Utility Exposed: Hackers Hid Undetected for 20 Months

In a shocking revelation, hackers secretly lurked on South Staffordshire Water's corporate network for 20 months, evading detection until a performance issue sparked an investigation in July 2022. The stealthy attackers gained unauthorized access via a September 2020 phishing attack, harvesting credentials and…

https://osintsights.com/uk-water-utility-exposed-hackers-hid-undetected-for-20-months?utm_source=mastodon&utm_medium=social

#WaterUtilityHack #UndetectedThreats #RansomwareAttempt #PhishingAttack #SupplyChainCompromise

#waterutilityhack #undetectedthreats #ransomwareattempt #phishingattack #supplychaincompromise

Daniel Marsh @[email protected] · 2026-05-06 · 18:13 UTC

A month-long breach saw DAEMON Tools' official installers distributing malware, signed with *their own* legitimate digital certificates. Kaspersky researchers uncovered this sophisticated supply chain compromise, which bypassed standard security checks and targeted high-value organizations in retail, government, and manufacturing for espionage. The attackers used multi-protocol C2…

https://www.tpp.blog/192uc7c

#cybersecurity #daemontools #supplychaincompromise

🤖 This post was AI-generated.

#cybersecurity #daemontools #supplychaincompromise

Pyrzout :vm: @[email protected] · 2026-02-02 · 14:00 UTC

How state-sponsored attackers hijacked Notepad++ updates https://www.helpnetsecurity.com/2026/02/02/2025-notepad-supply-chain-compromise/ #government-backedattacks #supplychaincompromise #telecommunications #financialindustry #Don'tmiss #Hotstuff #News #Asia

#government #supplychaincompromise #telecommunications #financialindustry #don #hotstuff

Pyrzout :vm: @[email protected] · 2026-02-02 · 14:00 UTC

How state-sponsored attackers hijacked Notepad++ updates https://www.helpnetsecurity.com/2026/02/02/2025-notepad-supply-chain-compromise/ #government-backedattacks #supplychaincompromise #telecommunications #financialindustry #Don'tmiss #Hotstuff #News #Asia

#government #supplychaincompromise #telecommunications #financialindustry #don #hotstuff

Pyrzout :vm: @[email protected] · 2026-02-02 · 14:00 UTC

How state-sponsored attackers hijacked Notepad++ updates https://www.helpnetsecurity.com/2026/02/02/2025-notepad-supply-chain-compromise/ #government-backedattacks #supplychaincompromise #telecommunications #financialindustry #Don'tmiss #Hotstuff #News #Asia

#asia #news #hotstuff #don #financialindustry #telecommunications

Pyrzout :vm: @[email protected] · 2026-02-02 · 14:00 UTC

How state-sponsored attackers hijacked Notepad++ updates https://www.helpnetsecurity.com/2026/02/02/2025-notepad-supply-chain-compromise/ #government-backedattacks #supplychaincompromise #telecommunications #financialindustry #Don'tmiss #Hotstuff #News #Asia

#government #supplychaincompromise #telecommunications #financialindustry #don #hotstuff

Pyrzout :vm: @[email protected] · 2025-11-26 · 14:50 UTC

Gainsight breach: Salesforce details attack window, issues investigation guidance https://www.helpnetsecurity.com/2025/11/26/gainsight-breach-salesforce-details-attack-window/ #supplychaincompromise #PaloAltoNetworks #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #paloaltonetworks #salesforce #don #datatheft #gainsight

Pyrzout :vm: @[email protected] · 2025-11-26 · 14:50 UTC

Gainsight breach: Salesforce details attack window, issues investigation guidance https://www.helpnetsecurity.com/2025/11/26/gainsight-breach-salesforce-details-attack-window/ #supplychaincompromise #PaloAltoNetworks #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #paloaltonetworks #salesforce #don #datatheft #gainsight

Pyrzout :vm: @[email protected] · 2025-11-26 · 14:50 UTC

Gainsight breach: Salesforce details attack window, issues investigation guidance https://www.helpnetsecurity.com/2025/11/26/gainsight-breach-salesforce-details-attack-window/ #supplychaincompromise #PaloAltoNetworks #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#saas #news #mandiant #hotstuff #gainsight #datatheft

Pyrzout :vm: @[email protected] · 2025-11-26 · 14:50 UTC

Gainsight breach: Salesforce details attack window, issues investigation guidance https://www.helpnetsecurity.com/2025/11/26/gainsight-breach-salesforce-details-attack-window/ #supplychaincompromise #PaloAltoNetworks #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #paloaltonetworks #salesforce #don #datatheft #gainsight

Pyrzout :vm: @[email protected] · 2025-11-20 · 21:35 UTC

Salesforce investigates new incident echoing Salesloft Drift compromise https://www.helpnetsecurity.com/2025/11/20/salesforce-investigates-new-incident-echoing-salesloft-drift-compromise/ #supplychaincompromise #GoogleCloud #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #googlecloud #salesforce #don #datatheft #gainsight

Pyrzout :vm: @[email protected] · 2025-11-20 · 21:35 UTC

Salesforce investigates new incident echoing Salesloft Drift compromise https://www.helpnetsecurity.com/2025/11/20/salesforce-investigates-new-incident-echoing-salesloft-drift-compromise/ #supplychaincompromise #GoogleCloud #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #googlecloud #salesforce #don #datatheft #gainsight

Pyrzout :vm: @[email protected] · 2025-11-20 · 21:35 UTC

Salesforce investigates new incident echoing Salesloft Drift compromise https://www.helpnetsecurity.com/2025/11/20/salesforce-investigates-new-incident-echoing-salesloft-drift-compromise/ #supplychaincompromise #GoogleCloud #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#saas #news #mandiant #hotstuff #gainsight #datatheft

Pyrzout :vm: @[email protected] · 2025-11-20 · 21:35 UTC

Salesforce investigates new incident echoing Salesloft Drift compromise https://www.helpnetsecurity.com/2025/11/20/salesforce-investigates-new-incident-echoing-salesloft-drift-compromise/ #supplychaincompromise #GoogleCloud #Salesforce #Don'tmiss #datatheft #Gainsight #Hotstuff #Mandiant #News #SaaS

#supplychaincompromise #googlecloud #salesforce #don #datatheft #gainsight

Anant Shrivastava aka anantshri @[email protected] · 2025-11-05 · 08:41 UTC

Sometimes I wonder what would happen if

oss developers simply list out every single bug report they receive on their website and clearly note we don’t have resources to fix it.

And then list every single mega corp that uses that OSS library and clearly send out message informing the world we don’t fix bugs and since all of these orgs don’t like helping anyone using them is vulnerable.

May be just may be that would give people an idea about putting pressure on wrong set of individuals.

But most importantly it will make it clear for people where the responsibility of security for your customers lie with you or with third party.

#softwaresupplychainsecurity #supplychaincompromise #opensource

Anant Shrivastava aka anantshri @[email protected] · 2025-11-05 · 08:41 UTC

Sometimes I wonder what would happen if

oss developers simply list out every single bug report they receive on their website and clearly note we don’t have resources to fix it.

And then list every single mega corp that uses that OSS library and clearly send out message informing the world we don’t fix bugs and since all of these orgs don’t like helping anyone using them is vulnerable.

May be just may be that would give people an idea about putting pressure on wrong set of individuals.

But most importantly it will make it clear for people where the responsibility of security for your customers lie with you or with third party.

#softwaresupplychainsecurity #supplychaincompromise #opensource

Anant Shrivastava aka anantshri @[email protected] · 2025-11-05 · 08:41 UTC

Sometimes I wonder what would happen if

oss developers simply list out every single bug report they receive on their website and clearly note we don’t have resources to fix it.

And then list every single mega corp that uses that OSS library and clearly send out message informing the world we don’t fix bugs and since all of these orgs don’t like helping anyone using them is vulnerable.

May be just may be that would give people an idea about putting pressure on wrong set of individuals.

But most importantly it will make it clear for people where the responsibility of security for your customers lie with you or with third party.

#softwaresupplychainsecurity #supplychaincompromise #opensource

Anant Shrivastava aka anantshri @[email protected] · 2025-11-05 · 08:41 UTC

Sometimes I wonder what would happen if

oss developers simply list out every single bug report they receive on their website and clearly note we don’t have resources to fix it.

And then list every single mega corp that uses that OSS library and clearly send out message informing the world we don’t fix bugs and since all of these orgs don’t like helping anyone using them is vulnerable.

May be just may be that would give people an idea about putting pressure on wrong set of individuals.

But most importantly it will make it clear for people where the responsibility of security for your customers lie with you or with third party.

#softwaresupplychainsecurity #supplychaincompromise #opensource

#opensource #supplychaincompromise #softwaresupplychainsecurity

Anant Shrivastava aka anantshri @[email protected] · 2025-11-05 · 08:41 UTC

Sometimes I wonder what would happen if

oss developers simply list out every single bug report they receive on their website and clearly note we don’t have resources to fix it.

And then list every single mega corp that uses that OSS library and clearly send out message informing the world we don’t fix bugs and since all of these orgs don’t like helping anyone using them is vulnerable.

May be just may be that would give people an idea about putting pressure on wrong set of individuals.

But most importantly it will make it clear for people where the responsibility of security for your customers lie with you or with third party.

#softwaresupplychainsecurity #supplychaincompromise #opensource