7 BLACKWIRE articles on Supply chain attacks, from March 26, 2026 to October 14, 2026. Newest first.
Iosevka font becomes a vector for supply‑chain attacks, exposing developers to covert backdoors and state‑sponsored espionage.
Go 1.27 release exposes deep vulnerabilities in software supply chain, sparking concerns among cybersecurity professionals
NPM v12 upgrade threatens global software supply chain with breaking changes
A supply chain attack on LiteLLM cascaded into Mercor, exposing secret AI training data for Meta, OpenAI, and Anthropic. The fallout is just beginning.
FBI declares Chinese hack of its DCS-3000 surveillance system a FISMA major incident. Salt Typhoon suspected in supply-chain breach of wiretap metadata.
A hijacked maintainer account, a phantom dependency, and a self-destructing RAT dropper. The axios npm compromise is the biggest supply chain attack of 2026.
A supply chain attack buried malware in LiteLLM's PyPI package. In 46 minutes, 47,000 installs. SSH keys, cloud creds, crypto wallets - all stolen.