#supplychain

"The supply chain of imperialism is global, and workers have learned the lesson it teaches: it can only be materially disrupted if action is taken globally too? https://www.newarab.com/news/dockworkers-22-countries-strike-over-arms-shipments-gaza-war #shipping #GazaProtests #dockworkers #strike #unions #supplyChain

Hey everyone! 👋 I'm Liam Anderson from Auckland, New Zealand! 🇳🇿 I work with the team at RPC Logistics, focusing on transport, warehousing, and supply chain solutions. 🚚📦 I'm excited to join Mastodon, connect with logistics professionals, exchange ideas, and learn from this community. Looking forward to meeting you all! 🤝 #Introduction #Logistics #SupplyChain #NewZealand

Trump's decision stopped short of #threats issued by #Hegseth & the #Pentagon, including that it could invoke the Defense Production Act to require Anthropic's compliance. The Pentagon had also said it considered designating #Anthropic a #SupplyChain risk, a step previously only used against businesses tied to foreign adversaries. But #Trump vowed further action if Anthropic did not cooperate with the phaseout. #law #AI #surveillance #AutonomousWeapons #privacy #security #InfoSec

Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack https://www.stepsecurity.io/blog/behind-the-scenes-how-stepsecurity-detected-and-helped-remediate-the-largest-npm-supply-chain-attack #CyberSecurity #SupplyChain #DevSecOps

Introducing StepSecurity Dev Machine Guard: Protecting Developer Machines from Supply Chain Attacks https://www.stepsecurity.io/blog/introducing-stepsecurity-developer-mdm-protecting-developer-machines-from-supply-chain-attacks #Security #DevOps #SupplyChain

Ex-Tesla team raises $12.5M to put supply chains on autopilot https://techcrunch.com/2026/09/29/ex-tesla-team-raises-12-5m-to-put-supply-chains-on-autopilot/ #Startups #AI #SupplyChain

📰 CISA & FBI Warn of Third-Party Risks to Industrial Control Systems CISA & FBI issue joint guidance on securing critical infrastructure from third-party ICS integrator risks. The advisory stresses least privilege, robust contracts, and secure remote access monitoring. #ICS #OTsecurity #CISA #SupplyChain 🔗

The Pulse: a new trend of CPU shortages https://blog.pragmaticengineer.com/the-pulse-a-new-trend-of-cpu-shortages/ #Tech #Hardware #SupplyChain

🤖 Fake LastPass Authenticator installer on GitHub drops a Windows kernel driver signed via Microsoft's hardware-compat program, killing AV/EDR before a password stealer runs. 0 VirusTotal detections at analysis time (LastPass/Delphos Labs). 🔗 https://thehackernews.com/2026/09/fake-lastpass-authenticator-installer.html #Malware #SupplyChain #CyberSec

🤖 Mandiant: an attacker hijacked an active AI coding-assistant session at an SaaS provider, then spread the Shai-Hulud worm across ~100 internal repos. The worm stole repository secrets and source code; a poisoned package recommended by the assistant was accepted. 🔗 https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html #AI #SupplyChain #Malware #InfoSec

Behind #RSPO’s certified “sustainable” #palmoil lies a harsh reality of #deforestation and #humanrights abuses 🔥🌳🌴 ⛔️connected to all #supplychain members. “Sustainable” palm oil is a lie, make sure you #Boycottpalmoil #Boycott4Wildlife

#News: Freedom United pushes the #US, #UK, and #EU to pass #supplychain #laws. They demand an end to voluntary corporate responsibility and that #corporates must face #criminal penalties for #slavery #forcedlabour. @palmoildetectives@mastodonapp.uk #HumanRights ⚖️⛓️

We resolved the dependency trees of 34 of the most-used npm packages (484 packages). Under 1% run install scripts, but only 21.5% publish build provenance: 78.5% ship with no verifiable link from the package you install back to the source and CI that built it. Scripts and data are published. #npm #supplychain #provenance

Two days ago a recall was issued for Baxter IV saline due to contamination with fibreglass. Today Braun IV saline is being recalled for zinc oxide contamination. Both of these things can kill you. The rapid increase in recalls, food safety issues and supply chain problems will disproportionately harm the elderly and disabled. It’s another way they’re practicing eugenics: https://www.fda.gov/safety/recalls-market-withdrawals-safety-alerts/b-braun-medical-inc-issues-voluntary-nationwide-recall-09-sodium-chloride-injection-usp-100-ml-150 #uspol #fascism #disability #eugenics #fda #supplychain

Currently investigating a bug blocking the build of the Arch Linux code package for several releases now. The problem comes from a mismatch between open-vsx.org and an extension who updated a release artifact on GitHub after open-vsx.org picked it and made it available on their website. Developers from around the world, please, PLEASE use immutable releases on GitHub or anywhere else! The whole software ecosystem thanks you. #archlinux #supplychain #packaging

N.L. has a hard bread shortage — but why do we eat it in the first place? Grocery stores across Newfoundland and Labrador have been struggling to keep hard bread in stock since a fire at the Purity factory in March put a crimp in the company’s baking operations.

🤖 CVE-2026-18577 (CVSS 8.2): auth bypass in N-able N-central, actively exploited. Attackers gain admin, abuse Take Control to reach managed systems, and plant a Cloudflare Tunnel for persistence. CISA KEV listed. Hotfix 2 out; update to 2026.3.1.10. 🔗 https://thehackernews.com/2026/08/n-central-attackers-reach-managed.html #CVE #CyberSec #RMM #SupplyChain

Microsoft's SEC disclosure on OpenAI reveals something worth noting: a dependency so deep it's flagged as a material risk. From an infosec architecture perspective, concentrating critical infrastructure around a single external AI provider creates an unusual threat surface — not just technical, but strategic and operational. Vendor lock-in at scale. #infosec #supplychain #AI

🤖 ChainDrop: self-propagating npm malware compromised 1,300+ packages (~2B monthly downloads). Malicious versions plant info-stealers on install; campaign appears automated and ongoing. 🔗 https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/ #SupplyChain #Malware #CyberSec

🤖 XCSSET v4.0 targets macOS devs via compromised Xcode projects in Git repos. Unit 42: 4-stage chain, 17 modules — new Chrome hijacker (CDP, steals cookies/MetaMask, fileless reverse shell) and Telegram trojanizer. Loader re-compiled per-build with unique ciphers. 🔗 https://www.bleepingcomputer.com/news/security/new-xcsset-variant-targets-macos-devs-via-compromised-xcode-projects/ #Malware #macOS #SupplyChain #CyberSec