VS Code Introduces Two Hour Extension Update Delay To Reduce Software Supply Chain Risks
Microsoft adds a two hour delay for automatic VS Code extension updates to reduce supply chain attacks while allowing immediate updates for trusted publishers.
OpenAI Confirms Limited Impact From TanStack Supply Chain Attack Linked To Malicious Packages
OpenAI confirms a supply chain attack linked to malicious TanStack packages compromised two employee devices and exposed limited credential material from internal repositories.
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware
North Korean-linked threat actors are exploiting the React2Shell vulnerability to deploy EtherRAT, a sophisticated remote access trojan using Ethereum smart contracts and multiple persistence methods targeting Linux systems.
