Supply Chain Attack Archives - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

How Attackers Abuse Entry Points...

Supply chain attacks have become a growing concern, particularly with the rise of open source packages and libraries across various programming languages. These attacks exploit vulnerabilities in the software supply...

CERT-UA Reports SickSync Campaign: Data...

Recently, the Computer Emergency Response Team of Ukraine cybersecurity (CERT-UA) issued a warning regarding a targeted cyber espionage campaign named SickSync, orchestrated by a group identified as UAC-0020 or Vermin....

Navigating Open-Source Supply Chain Threats:...

In today’s business world, companies are determined to create software faster than ever before. Developers are under immense pressure to deliver products to customers quickly. To accelerate this process, developers...

GitHub Repositories Victimized Amid Supply...

In a digital landscape rife with vulnerabilities, a recent and disconcerting phenomenon has come to light. GitHub repositories, the foundation of numerous software projects, have been victimized by a devious...