software supply chain

The Polinrider and Glassworm Supply Chain Offensive: A Forensic Post-Mortem

by

Industrialised Software Ecosystem Subversion and the Weaponisation of Invisible Unicode Executive Summary The early months of 2026 marked a pivotal escalation in the sophistication of software supply chain antagonism, characterised by a coordinated, multi-ecosystem offensive targeting the global development community. Central to this campaign was the Polinrider operation, a sprawling initiative attributed to Democratic People’s … Read more

Supply-Chain Extortion Lessons from the Pornhub-Mixpanel Incident

by

When the Weakest API Becomes the Loudest Breach. Key Takeaways for Security Leaders You can giggle about the subject if you want. The headlines almost invite it. An adult platform. Premium users. Leaked “activity data.” It sounds like internet tabloid fodder. But behind the jokes is a breach that should make every security leader deeply … Read more

Defence Tech at Risk: Palantir, Anduril, and Govini in the New AI Arms Race

by

A Chink in Palantir and Anduril’s Armour? Govini and Others Are Unsheathing the Sword When Silicon Valley Code Marches to War A U.S. Army Chinook rises over Gyeonggi Province, carrying not only soldiers and equipment but streams of battlefield telemetry, encrypted packets of sight, sound and position. Below, sensors link to vehicles, commanders to drones, … Read more

The Npm Breach: What It Reveals About Software Supply Chain Security

by

When a Single Phishing Click Becomes a Global Vulnerability – Meet the Supply Chain’s Weakest Link 1. Phishing-Driven Attack on npm Packages On 8 September 2025, maintainer Qix fell victim to a highly convincing phishing email from [email protected], which led to unauthorised password reset and takeover of his account. Attackers injected malicious code into at … Read more