The Chalk Supply Chain Breach: How a Phishing Email Compromised 2 Billion Weekly Downloads
The npm ecosystem experienced one of its most severe supply chain compromises on September 8, 2025, when attackers gained access […]
Shibarium Validator Governance Attack
The recent security breach targeting Shibarium’s validator infrastructure has exposed critical vulnerabilities in cross-chain bridge governance, forcing the development team
THORChain Co-Founder Loses $1.35 Million in North Korean Telegram Phishing Attack
The cryptocurrency community is reeling after THORChain co-founder JP lost $1.35 million from a personal wallet on September 9, 2025,
September 2025 NPM Supply Chain Breach Drains Crypto Wallets Via Address Swap Malware
The JavaScript ecosystem suffered one of its most devastating supply chain attacks in September 2025, as threat actors compromised at
NPM Supply Chain Attack Hijacks 2.5 Billion Weekly Downloads in Crypto Wallet Heist
A devastating supply chain attack targeting some of the most widely used JavaScript packages has exposed critical vulnerabilities in the
Two Billion Downloads Compromised: How a Single Phishing Email Infected the NPM Ecosystem
The JavaScript development ecosystem experienced one of its most alarming supply chain attacks on September 8-9, 2025, when a sophisticated
NPM Supply Chain Attack Compromises 2 Billion Weekly Downloads in 16-Minute Crypto Draining Operation
The JavaScript development ecosystem suffered one of its most devastating security breaches on September 8, 2025, when a sophisticated phishing
Unaudited Code Deployment Drains $2.59 Million From Nemo Protocol on Sui Network
The Sui-based DeFi yield trading protocol Nemo suffered a devastating security breach on September 7, 2025, with attackers exploiting unaudited
EchoLeak CVE-2025-32711: First Zero-Click AI Prompt Injection Exploit Exposes Enterprise Data
On September 6, 2025, cybersecurity researchers published a landmark paper on arXiv documenting EchoLeak (CVE-2025-32711), the first confirmed zero-click prompt
npm Supply Chain Attack Exploits Phishing to Compromise 18 Packages With 2 Billion Weekly Downloads
The cryptocurrency ecosystem narrowly avoided a catastrophe on September 5, 2025, when attackers launched one of the most sophisticated supply