Netcrook
#supply chain
When a Build File Turns Hostile: The Quiet Malware Risk Inside Visual Studio Projects
A Windows Trojan documented in late 2025 is a reminder that in modern development, project files can become attack surface, not just configuration.
When a Build File Becomes the Breach Door
A multi-stage Trojan tied to Visual Studio project files shows how ordinary build logic can turn into a supply-chain attack surface.
GNU Guix Bug Turned a Trusted Restore Path Into a Host-Write Risk
A vulnerability in Guix's privileged daemon shows how package restoration, when mishandled, can cross from software delivery into root-level file tampering.
DeadLock’s Latest Victim Listing Puts an Oil-and-Gas Supplier in the Crosshairs
A public victim post does not prove a breach, but it does show how ransomware pressure can land on industrial suppliers whose engineering and service systems matter far beyond email and file shares.
Deadlock Victim Listing Puts a Logistics Provider Under a Cyber Microscope
A named victim entry tied to a logistics company is only a claim, not proof, but it is enough to justify a careful look at how 3PL environments absorb ransomware pressure.
DeadLock’s New Logistics Target Puts Luxury Supply Chains Under Extortion Pressure
A ransomware listing tied to NXIT, Franco Vago S.p.a., and Traconf Srl points to a high-value logistics environment where stolen data can matter as much as encryption.
Deadlock’s Latest Name Drop Puts a Precision Maker in the Ransomware Spotlight
A Taiwanese connector manufacturer appears on a ransomware extortion list, and the technical details behind Deadlock suggest the risk is bigger than a simple leak-site headline.
DeadLock’s Latest Victim List Points to a High-Pressure Target: Industrial Chemicals
A public victim listing tied to a Brazilian chemical supplier shows why ransomware crews keep circling industrial firms whose work sits inside manufacturing chains.
Washington Turns the Lens on Chinese AI - and the Supply Chain Behind It
U.S. policymakers are weighing new limits on Chinese AI technology, a move that could reshape how companies buy, deploy, and govern models across the AI stack.
When Logistics Goes Digital, the Real Attack Surface Moves Into Operations
Transport and logistics gain speed from digitization, but the same connectivity can widen cyber risk across OT, suppliers, and remote access paths that keep goods moving.
When Web Scraping Becomes a Regulated AI Supply Chain
The EDPB’s 03/2026 guidance places generative-AI scraping firmly inside GDPR analysis whenever personal data enters the training pipeline, turning dataset design into a compliance and security problem at the same time.
HalluSquatting Shows How AI Assistants Can Be Tricked Into Pulling the Wrong Code
Researchers demonstrated a naming attack against AI assistants that can move from hallucinated lookups to remote code execution and, in some cases, malware delivery.
Why a Local AI Stack Matters When the Stakes Are Industrial
A new on-premises AI platform aimed at critical infrastructure is less about flashy model demos and more about where data lives, who controls the updates, and how much trust operators can actually place in automation.
GNU Guix Faces a Rare Trust-Chain Break in Its Most Sensitive Paths
Multiple critical flaws in Guix’s substitute and channel-update workflows highlight how a package manager built for integrity can still be shaken by unsafe parsing, archive handling, and privileged daemon logic.
The Fake SDK That Turns Payments Code Into a Theft Vector
A lookalike NuGet package built to imitate Braintree's .NET client shows how one deceptive dependency can put card data and gateway secrets in reach of an application.
When a Payment Package Waits for Production, the Supply Chain Has Already Been Crossed
Researchers reported a NuGet package named Braintree.Net that mimics a payment SDK and is said to steal card data only in live environments, a reminder that build-time trust can become runtime risk.
Inside the Trust Breakpoint Open Source Projects Fear Most
OpenMandriva Linux says it faced an attempted internal sabotage tied to a contributor dispute, a reminder that repository access can become a security issue long before malware enters the picture.
Third-Party Flaw, Carrier Mailbox: The KDDI Case Shows How Small Weaknesses Become Large Exposure
A reported zero-day in an external system opened a path into a KDDI email environment, with the impact figure placing the incident far above an ordinary mailbox problem.
Banking’s New Weak Spot Is Not the Firewall - It Is the Vendor Map
In finance, cyber risk is no longer confined to the bank’s own systems; the real exposure now stretches across SaaS tools, network gear, suppliers, and the quieter layers of the technology supply chain.
Fake SDKs, Real Risk: The Package Trap Lurking in Developer Workflows
A cluster of malicious packages in npm and PyPI shows how public registries can be turned into a delivery channel for software-supply-chain abuse.