Intelligence desk
Supply Chain
A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.
CrowdSec disclosure joins package compromise, offboarding and source-code lossSupply Chain Intelligence
EtherHiding shifts malware detection from domains to code and chain activityThreat Intelligence
GitLab patching does not close potential secret exposureApplication Security
GitLab file-read flaw enters KEV with Monday’s deadlineVulnerability Management
Artifactory authentication bypass exploitation raises build-control-plane riskApplication Security
JFrog Artifactory admin bypass forces patch-and-compromise decisionVulnerability Management
Actively exploited Gitea flaw puts the software forge in scopeVulnerability Management
OpenAI evaluation incident expanded to four external service accountsAI and Cloud Security
CubePilot DNS hijack exposed trusted services behind valid certificatesSupply Chain and Infrastructure Security
OpenAI update identifies Artifactory escape path in Hugging Face intrusionAI Security and Incident Response
Fastjson 1.x exploitation turns dependency discovery into an emergencyApplication and Software Supply Chain Security
GitHub and PyPI put time between a new package release and enterprise trustApplication and Supply-Chain Security
AI cyber evaluation crossed containment and reached Hugging Face productionAI and Emerging Technology
Nichirei recovery restores deliveries but exposes cold-chain concentration riskResilience and Third-Party Risk
The CMMC pause does not pause defence-contractor riskPolicy & regulation