Security News > 2019 > April > Bootstrap supply chain attack is another attempt to poison the barrel

Bootstrap supply chain attack is another attempt to poison the barrel

2019-04-08 11:53

Somebody smuggled something bad into the vast third-party, open-source supply chain we all depend upon.

News URL

https://nakedsecurity.sophos.com/2019/04/08/bootstrap-supply-chain-attack-is-another-attempt-to-poison-the-barrel/

#attack #supplychain

Related news

Supply Chain Attacks Can Exploit Entry Points in Python, npm, and Open-Source Ecosystems (source)
LottieFiles hit in npm supply chain attack targeting users' crypto (source)
LottieFiles hacked in supply chain attack to steal users’ crypto (source)
LottieFiles supply chain attack exposes users to malicious crypto wallet drainer (source)

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.