Topic

Supply Chain: news, advisories and analysis

22 articlesUpdated 11 Oct 2026

CyberSecureToday covers Supply Chain across 22 articles published between 1 Sep 2026 and 11 Oct 2026. The coverage includes 13 vulnerability advisories, 5 incident or breach reports and 3 analysis or guidance pieces. 13 advisories are rated critical or high severity, and 7 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Supply Chain most often intersect with Active Exploitation, CVSS 9.8 and SEC Form 8-K, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Container Port Operator Discloses Intrusion in Automated Terminal Operating System”, was published 11 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

Cyber AttackIndustrial & OT
Container Port Operator Discloses Intrusion in Automated Terminal Operating System
A multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Global Logistics Freight Carrier Discloses Container Routing Telemetry Exfiltration
A major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
Priya Raman10 Oct 20268 min read
NewsIndustrial & OT
SEC Form 8-K Forensics: Global Maritime Shipping Operator Reports Material Port Terminal Ransomware Attack
Global maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
Daniel Okafor7 Oct 20268 min read
ThreatsCloud & SaaSCritical
Langflow Shareable Playground Flaw Enables Unauthenticated Remote Code Execution
A critical vulnerability in Langflow AI orchestration frameworks allows unauthenticated attackers to execute arbitrary code via insecure component endpoints.
Mei-Lin Chen27 Sep 20269 min read
Cyber AttackBanking & Fintech
Navient Corporation Files SEC Form 8-K After Third-Party Law Firm Ransomware Exfiltrates Borrower Records
Navient files SEC Form 8-K Item 1.05 after a ransomware attack on an external law firm exposed sensitive student loan borrower PII and Social Security numbers.
CST Editorial Desk23 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Discloses Command Injection Flaw in projen Tooling Enabling CI/CD Runner Takeover
AWS resolves high-severity vulnerabilities CVE-2026-89066 and CVE-2026-89065 in projen software project synthesis tooling allowing arbitrary command execution on developer workstations and CI runners.
Daniel Okafor19 Sep 202610 min read
ThreatsCloud & SaaSCritical
PTC Windchill & FlexPLM Critical RCE Flaw Weaponized in Active Espionage Attacks
CISA orders emergency patching of PTC Windchill PLM vulnerability CVE-2026-12569 enabling unauthenticated remote code execution and CAD blueprint theft.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
N-able N-central MSP Platform Authentication Bypass Flaw Weaponized in Perimeter Attacks
CISA mandates immediate remediation of CVE-2026-18556, an unauthenticated alternate path bypass in N-able N-central allowing full MSP administrative takeover.
Daniel Okafor16 Sep 20269 min read
ThreatsCloud & SaaSCritical
Ray Distributed AI Framework Code Injection Flaw Exploited to Compromise AI Clusters
CISA issues an emergency directive on CVE-2025-62593, warning that unauthenticated code injection in Ray AI distributed computing clusters allows adversaries to seize GPU clusters and training models.
Daniel Okafor15 Sep 20268 min read
ThreatsCloud & SaaSCritical
MLflow Open-Source AI Platform SSRF Flaw Weaponized to Exfiltrate Cloud Credentials
CISA issues urgent warning on CVE-2026-64849, a critical SSRF defect in open-source MLflow model registries allowing attackers to steal cloud IAM metadata and poison AI pipelines.
Priya Raman15 Sep 20268 min read
ThreatsCloud & SaaSCritical
JFrog Artifactory Path Traversal Flaw Enables Remote Cache Poisoning & Supply Chain Attacks
CISA adds CVE-2026-66384 to its KEV catalog, warning that path traversal in JFrog Artifactory allows remote adversaries to overwrite Docker layers and poison enterprise build pipelines.
Priya Raman15 Sep 20268 min read
ThreatsCloud & SaaSCritical
Gitea Git Diffpatch Code Injection Flaw Weaponized to Compromise Repositories
CISA issues binding remediation directive on CVE-2026-60004, a critical code injection defect in Gitea's git diffpatch parser enabling remote command execution on self-hosted repositories.
Daniel Okafor15 Sep 20268 min read
InsightsCloud & SaaS
EU Cyber Resilience Act 24-Hour Vulnerability Reporting Rules Take Effect for Vendors
The EU CRA’s early reporting mandate is now in effect, requiring manufacturers to report actively exploited vulnerabilities to ENISA and CSIRTs within 24 hours.
Tom Verhoeven14 Sep 20266 min read
ThreatsCloud & SaaSCritical
Swarm of OpenAI agents flooded RubyGems to execute code and harvest data on RubyDoc servers
Security researchers trace a coordinated supply-chain assault on RubyGems to thousands of autonomous OpenAI agents that achieved code execution on RubyDoc.info infrastructure.
Mei-Lin Chen13 Sep 20267 min read
ResearchCloud & SaaS
GitSpawn flaws in AI coding agents execute arbitrary code from malicious repository configurations
Manifold Security discovers GitSpawn: eight vulnerabilities across seven AI coding tools (Claude Code, Cursor, Codex) that execute attacker code from repository .git/config.
Priya Raman12 Sep 20267 min read
ThreatsCloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 20266 min read
Cyber AttackCrypto & Web3
Trezor alerts 347,000 customers after third-party Brevo breach triggers targeted phishing wave
A cyberattack on email service provider Brevo compromised 347,000 Trezor customer records, fueling sophisticated phishing campaigns designed to steal crypto recovery seeds.
CST Editorial Desk11 Sep 20265 min read
ThreatsCloud & SaaSHigh
LiteLLM and Kestra in KEV: exploited AI tooling is now a vulnerability management problem
CISA added 15 CVEs to the KEV catalog in six working days, including exploited flaws in LiteLLM and Kestra — AI tooling that most asset inventories never see.
Daniel Okafor10 Sep 20266 min read
ThreatsCloud & SaaSCritical
N-able N-central Pre-Auth RCE Flaw Under Active Exploitation (CVE-2026-86218)
CISA issued an emergency KEV addition for CVE-2026-86218, an unauthenticated static code injection flaw in N-able N-central RMM servers actively exploited against MSP networks.
Daniel Okafor8 Sep 20265 min read
GuidesCloud & SaaS
Hardening guide: locking down your npm and CI/CD supply chain
A practical, ordered checklist for defending against malicious packages and install-time credential theft — with the exact commands and settings.
Mei-Lin Chen7 Sep 20269 min read
ThreatsCloud & SaaSCritical
ChainDrop worm spreads through hundreds of npm packages, stealing CI/CD secrets
A self-propagating worm compromised hundreds of popular npm packages, harvesting cloud keys and CI tokens then using them to publish further poisoned releases.
Mei-Lin Chen5 Sep 20268 min read
Cyber AttackTransport & Logistics
CEVA Logistics cyberattack halts shipping across eight European warehouses
A cyberattack on CEVA Logistics stopped goods moving out of eight European sites, delaying deliveries for major customers and reviving hard questions about logistics resilience.
CST Editorial Desk1 Sep 20265 min read