Supply Chain Risk - Page 8
Stories from Supply Chain Risk come first, newest first, then stories from connected topics (Pentagon, Anthropic, AI Policy & Safety, Cybersecurity, Cybersecurity, Tech News), each labelled with where it comes from. This view is not indexed by search engines.
Latest
France Attributes Fridge Cyberattacks to IRGC Shahid Kaveh
France attributes the October supermarket fridge cyberattacks to IRGC unit Shahid Kaveh. Focus on defence, warrants and sanctions—not attack theatre.
Contact Form 7 File Upload Flaw Fixed in Version 6.2.4
Contact Form 7 versions 6.2 to 6.2.3 let unauthenticated users upload files via a form field flaw. Vendor and NVD urge an upgrade to 6.2.4 for all users.
Chainalysis Restores Reactor and KYT After Breach Hit
Chainalysis restored Reactor, KYT and Address Screening on 7 November after password hashes and live tokens for all users were exposed.
CISA Adds FreeSWITCH Code Injection CVE-2026-116779 to KEV
CISA listed FreeSWITCH CVE-2026-116779 in KEV on 9 November with a 12 November due date. Versions through 1.11.2 are affected; 1.11.3 fixes it.
CISA Adds GPUStack Auth Bypass CVE-2026-102895 to KEV
CISA added GPUStack’s authentication-bypass flaw CVE-2026-102895 to its KEV list on 9 November, with a federal due date of 12 November 2026.
China Extends Critical Minerals Export Control Pause
China has extended its pause on critical-minerals export controls to 10 January 2027. The step extends a suspension; export licences are still required.
Tajani Seeks G7 Talks After Personal Data Appears on Dark Web
Tajani cyber threats prompt a request for G7 talks after Italy reports his personal data on the dark web. No attacker is identified in the statement.
Nepal Opens Joint Scam Centre With Round-the-Clock Helpline
Nepal’s scam centre joins police, banks and telecom providers, with 24-hour complaints and helpline 1247. Recovery results have not been reported.
Microsoft Previews Entra Agent ID Lifecycle Controls
Entra Agent ID previews lifecycle policies with fixed default inactivity actions and licensed custom rules. Microsoft advises against production use.
Singapore Issues Four-Step Safety Advice for AI Agents
Personal AI agents guidance from Singapore urges limited access, one-time approvals and scam awareness. CSA, GovTech and IMDA offer advice, not rules.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.