Tag · 126 Articles

supply chain. Tagged Articles.

Articles

Page 1 of 13

supply chain

Vendor Risk Assessment From the Outside In

A vendor risk assessment should not stop at a questionnaire. Here is how to add outside-in evidence, tier vendors and keep the review current.

Oct 19, 2026Read Article →

AI-generated data leakage visual showing sensitive information spilling from an unsecured system

supply chain

From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways

Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.

Jan 28, 2026Read Article →

Operation ForumTroll APT card showing Russia-aligned influence and espionage threat actor

supply chain

Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783)

Operation ForumTroll is a name from one vendor report for a 2025 phishing campaign using a Chrome zero-day. See what NVD, Google and CISA confirm.

Jan 6, 2026Read Article →

supply chain

OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT

OldGremlin is a Russian-speaking, financially motivated group that mixes ransomware with slow APT-style intrusions. See how it attacks and how to defend.

Dec 29, 2025Read Article →

Callisto APT cyber espionage group – Russia-linked threat actor targeting NATO and government institutions

supply chain

Callisto APT: Russia’s Persistent Espionage Operator

Callisto (COLDRIVER, SEABORGIUM, TA446) profile: espionage active since at least 2015, with credential harvesting, spear-phishing and cloud persistence.

Dec 23, 2025Read Article →

supply chain

Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe

Angry Likho is a spear-phishing espionage group also tracked as Sticky Werewolf. See its aliases, tactics, targets and 2025 trends, plus defence tips.

Dec 17, 2025Read Article →

supply chain

GALLIUM APT: What MITRE ATT&CK Says

GALLIUM is a cyberespionage group MITRE ATT&CK says has been active since at least 2012. See what MITRE confirms, what is unproven and how to defend.

Dec 16, 2025Read Article →

Futuristic cyber intelligence robot analyzing code, representing the React2Shell (CVE-2025-55182) Day 5 exploitation landscape.

supply chain

React2Shell — The Day 5 Reality Check

React2Shell (CVE-2025-55182) is a critical React Server Components flaw. See how exploitation grew in the five days after disclosure and what to do.

Dec 10, 2025Read Article →

Illustration of an octopus with glowing red eyes and glasses representing the TraderTraitor APT group, a North Korea–linked Lazarus subgroup targeting crypto and blockchain companies.

supply chain

TraderTraitor: North Korea’s Crypto Heist Machine

TraderTraitor profile (Jade Sleet, UNC4899): North Korea-aligned, part of Lazarus, with crypto theft, trojanized developer tools and supply chain abuse.

Dec 6, 2025Read Article →