Cybersecurity News

Filters
Category
Tag
Reset

Filtered by tag: supply chain security × Clear

Australian Cybersecurity Magazine

Azul issues urgent Java security updates following eMudhra certificate compromise

Azul has released an emergency Java security update following the compromise of eight eMudhra intermediate Certificate Authority certificates, disclosed on 20 October 2026. The compromised certificates posed potential security risks, prompting Azul to act outside its normal update schedule to protect users from threats linked to the affected CAs.

The ascent of autonomous attacks and the race to contain them

AI is enabling autonomous cyberattacks that can conduct reconnaissance, breach systems, and adapt without human input. A 2025 Jaguar Land Rover attack cost £485m in losses. Smaller businesses face growing exposure as AI scans for vulnerabilities at scale. Defenses need to shift toward continuous monitoring, strong identity controls, and AI-powered detection, supported by human expertise, to counter threats moving faster than traditional security measures.

GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries

Matched: cryptocurrency

GitHub has expanded Dependabot's malware detection beyond npm to cover eight package ecosystems, including PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. The feature alerts developers to malicious dependencies capable of stealing passwords, API keys, cloud credentials, cryptocurrency wallets, and source code, offering broader protection against open-source supply chain attacks.