Supply Chain Risk - Page 10
Stories from Supply Chain Risk come first, newest first, then stories from connected topics (Pentagon, Anthropic, AI Policy & Safety, Cybersecurity, Cybersecurity, Tech News), each labelled with where it comes from. This view is not indexed by search engines.
Latest
ACSC, CISA and NSA Update Post-Quantum Vendor Questions
Post-quantum cryptography guidance refresh: ACSC, with CISA and NSA, updates vendor questions for procurement and assurance — not new rules.
Alpine OpenSSH Password Authentication Bypass Fixed
Alpine OpenSSH password authentication bypass: apk upgrade and restart sshd, or set PasswordAuthentication no on no-PAM builds.
FATF Maps Illicit Flows Behind Global Scam Compounds
Scam compounds cause tens of billions in losses a year, FATF says, with new principles to disrupt illicit flows before and after victim payments.
Solaseed and AIRDO Confirm Airline Email Leak via Mail Vendor
Solaseed Air (~490,000) and AIRDO (max 673,920) report an airline email leak from an external mail system. Press attributes it to Arara Message.
Canada Flags Zyxel GS1900 Vulnerability as Possibly Exploited
Zyxel patched GS1900 out-of-bounds write CVE-2026-107441. Canada's Cyber Centre cites open-source reporting of exploitation. Update affected switches.
Rails Security Releases Fix Critical Active Storage Flaw
Rails 8.0.5.2 and 8.1.4.1 fix a critical Active Storage ImageMagick flaw (CVSS 9.8) and 20 other issues. Upgrade; rotate secrets if Disk was exposed.
Crédit Mutuel Arkéa Confirms Cyberattack on Its Own Accounts
Crédit Mutuel Arkéa confirms a cyberattack moved funds from its own account via a service provider. Customer assets safe; exact loss figure unconfirmed.
CISA Adds Apple’s 2024 WebKit Flaw CVE-2024-27834 to Its KEV List
CISA has added Apple KEV vulnerability CVE-2024-27834, a WebKit flaw fixed in May 2024, to its exploited list. Keep Apple devices and Safari updated.
Google Backstops Financing for TeraWulf’s $19bn Anthropic Leases
The TeraWulf Google backstop supports debt financing tied to about $19bn of Anthropic lease commitments in Kentucky. Google is not lending the money.
OCC Gives Bank Examiners a Super Intelligence Risk Framework
The OCC super intelligence framework guides bank examiners on AI risk. It sets no new rules, and banks need no separate SI risk appetite, the OCC says.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.