Critical Minerals & the G2…
thinktankcalendar.com/event/f41681...
#Commodities #Global #SupplyChainSecurity

📊 In the last day: 1 malicious package caught across npm, ahead of the public advisory. We were first on 33%.

#malware #supplychainsecurity #opensource

Banks must modernize their software supply chain now—not wait for full app rewrites to boost security. #SupplyChainSecurity #FinancialServices #DevSecOps #AIThreats https://thedailytechfeed.com/why-banks-must-secure-their-software-supply-chain-first-not-rewrite-everything/

⏱ Before the advisory: our scan flagged npm @bottino/[email protected] 50 days ahead of MAL-2026-17351.

#flaggedfirst #npm #malware #supplychainsecurity

Two compromised #GitHub Actions 'actions-cool' were re-enabled with malicious tags intact, silently restarting Mini Shai-Hulud worm across downstream workflows. One action has about 15,000 dependent repos!
👇
#SupplyChainSecurity

🛡️ Krait Critical Minerals is focused on advancing high-value antimony assets in stable North American jurisdictions.

Find out more with MiningIR ➡️ miningir.com/featured-compa...

#Antimony #CriticalMinerals #KRIT #DefenseTech #SupplyChainSecurity #MiningIR #MiningNews

A CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow could have leaked repository secrets. No abuse found, and the workflow is gone.

#GeoServer #GeoServerCloud #GitHubActions #SupplyChainSecurity #CICD #DevSecOps #OpenSource #SecretsLeak

⏱ 3 days of lead time on npm [email protected]: we flagged it, then MAL-2026-17228 confirmed it.

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 10 malicious packages caught across npm, ahead of the public advisory. We were first on 52%.

#malware #supplychainsecurity #opensource

TUE | 29 SEPT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #ThreatIntel #SupplyChainSecurity #MobileSecurity #CloudSecurity #InfoSec #EnterpriseSecurity #RSSHDelivery #NewYorkTech #TechTok #CyberTok

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to

🔗 Read more: www.helpnetsecurity.com/2026/09/29/o...

#AI #supplychainsecurity #cybersecurity

figlet-chalk-render v1.2.1 (npm) contains CRITICAL malicious code: on import, it downloads & runs a Windows executable, evading CI/sandbox. Remove & audit dependencies now. https://radar.offseq.com/threat/malicious-code-in-figlet-chalk-render-npm-e2cae6cc542e670e #OffSeq #npm #SupplyChainSecurity

📈 Our week: 67 malicious packages flagged across the ecosystems, npm the hottest, typically 0 days before the advisory landed.

#malware #supplychainsecurity #opensource

⏱ 2 days of lead time on npm [email protected]: we flagged it, then MAL-2026-17215 confirmed it.

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 5 malicious packages caught across pypi, ahead of the public advisory. We were first on 21%.

#malware #supplychainsecurity #opensource

SUN | 27 SEPT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #PowerGrid #LegalTech #SupplyChainSecurity #InfoSec #EnterpriseSecurity #RSSHDelivery #NewYorkTech #TechTok #CyberTok

🚀 Canada Launches Critical Minerals Strategy Targeting Chinese Market Dependence
🔎 Read the full update:
➡️https://miningir.com/canada-launches-critical-minerals-strategy-targeting-chinese-market-dependence/

#Canada #CriticalMinerals #CriticalMineralsStrategy #SupplyChainSecurity #Diversi

⏱ We flagged npm [email protected] 7 hours before the public advisory landed (MAL-2026-17190).

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 7 malicious packages caught across npm and pypi, ahead of the public advisory. We were first on 12%.

#malware #supplychainsecurity #opensource