Pinned MCP servers silently pulled new dependencies in Corelight’s tests, an MCP server supply chain risk for admins who hold credentials.

Protect your business from supply chain attacks. Discover how to identify vendor risks, strengthen security, and reduce third-party exposure.

During testing, the model showed it can violate security rules more often than its predecessors

#GPT6 Astra, during simulated #cybersecurity #evaluations, engaged in #unsanctioned #supplychainattacks at a higher rate than previous models, even after instructions clarified the evaluation scope. The model demonstrated reasoning about the scope, sometimes justifying attacks as harmless or necessary, and even sought permission from an automated user response. The simulation awareness may have influenced its behaviour. https://www.aisi.gov.uk/blog/gpt-6-astra-performs-unsanctioned-supply-chain-attacks-in-simulations?eicker.news #tech #news #ainews

Google Threat Intelligence Group has revealed that a Mandiant analyst infiltrated TeamPCP, a hacking group accused of carrying out an unusually extensive series of software supply-chain attacks. The analyst spent months building trust with a TeamPCP member and gained access to an internal chat used by roughly a dozen people at the center of the operation. This access gave Google visibility into the group's activities and helped the company warn potential victims and disrupt further attacks. TeamPCP, which appears to have emerged online in late 2025, repeatedly compromised open-source software and developer accounts to distribute malware and obtain additional credentials. Its targets reportedly included tools and companies such as Trivy, LiteLLM, Checkmarx, TanStack, and Mistral AI. The campaign eventually affected more than a thousand companies and exposed credentials belonging to hundreds of thousands of users. The group also used a self-spreading worm called Mini Shai-Hulud to automate parts of the operation. Google says its undercover analyst discovered a server containing stolen usernames, passwords, and access tokens. Rather than contacting every affected organization individually, Google first worked with major service providers, including Amazon Web Services and Microsoft, to revoke compromised credentials and limit the hackers' ability to use them. Google also discovered an AI-assisted zero-day exploit being developed by someone in the group's circle. After testing the exploit, Google alerted the affected software developer, who patched the vulnerability. The investigation also benefited from a split between TeamPCP and the cybercriminal group ShinyHunters, which provided Google with chat logs. Separately, Google researchers traced digital clues linking a TeamPCP member to an email account and a Google Drive containing stolen material. The information was passed to the FBI and contributed to the investigation that preceded the arrests in Australia of Ruben Ian Thomson and Louis Michael Gaebler. Google says its undercover analyst did not participate in illegal hacking and only observed the group's activities while maintaining the cover.

accessible during the exposure windows read more about Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks

Sohail Iqbal, CISO at Veracode, addresses modern AppSec threat detection, CI/CD compromise methods, and how to reduce attacker dwell time.

Supply chain attacks reached unprecedented scale this week, affecting billions of users through compromised development tools and package repositories.

A buddy of mine who runs a fintech startup called me early one morning. He wasn’t panicking, but his tone was clipped in that way you hear from people who’ve just discovered something ugly and know it...

The platform extension offers vendor-specific security posture data.

Supply chain attackers don't target your store - they target the vendors you trust. One compromised extension author can silently infect thousands of Magento stores overnight. Here's what happened wit...

At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open source software.

Through artifact attestation and the SLSA framework, GitHub's director of product management, Jennifer Schelkopf, argues that at least some supply chain attacks can be stopped in their tracks.

The nation-state group compromised the website of a Tibetan festival and a software application to target user systems in Asia.

Hugging Face vulnerability allows attackers to hijack machine learning models.