--- title: "#supply-chain-attack articles | Hashnode" description: "Explore 45 articles tagged #supply-chain-attack on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/supply-chain-attack" --- Tag # #supply-chain-attack 45 posts · 0 followers [Fonz](https://hashnode.com/@aiza-hextyx) · [4d ago](https://hashnode.com/posts/the-6-3-billion-binance-hack-why-devops-workstations-shouldn-t-have-unlimited-internet-access/6aef29c22c305a747a6631a6) ### [The $6.3 Billion Binance Hack: Why DevOps Workstations Shouldn't Have Unlimited Internet Access](https://aiza-hextyx.hashnode.dev/the-6-3-billion-binance-hack-why-devops-workstations-shouldn-t-have-unlimited-internet-access?utm_source=hashnode&utm_medium=feed) The $6.3B Binance hack exposes unrestricted DevOps internet access risks. Network isolation, egress controls, and secure build environ reduce risk. 12 min read · [aiza-hextyx.hashnode.dev](https://aiza-hextyx.hashnode.dev/the-6-3-billion-binance-hack-why-devops-workstations-shouldn-t-have-unlimited-internet-access?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Nov 3](https://hashnode.com/posts/software-freshness-is-a-security-metric-learn-to-measure-now/6ae9268e2060d311d9c6d83e) ### [Software Freshness Is a Security Metric! Learn to Measure Now...](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) The dashboard was green. Every image in the service had passed its scan, the report was attached to the release, and I was ready to close the ticket. Then I did a small exercise I had read about: pick 7 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 23](https://hashnode.com/posts/brunnerctf-2026-the-three-ways-writeup/6a8b17fec9ed6fd6e84326ef) ### [BrunnerCTF 2026 : The Three Ways Writeup](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) The Three Ways BrunnerCTF 2026 writeup: exploit Gitea, Drone CI, leaked secrets, and an unsigned rollout agent to gain root access. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/brunnerctf-2026-the-three-ways-writeup?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 5](https://hashnode.com/posts/notpetya/6a735a12d88360f40d4edbb4) ### [NotPetya](https://sagunwrites.hashnode.dev/notpetya?utm_source=hashnode&utm_medium=feed) The Malware That Looked Like Ransomware 8 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/notpetya?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 1](https://hashnode.com/posts/what-is-supply-chain-malware/6a6dffcdc13937ad15adcabb) ### [What Is Supply Chain Malware?](https://sagunwrites.hashnode.dev/what-is-supply-chain-malware?utm_source=hashnode&utm_medium=feed) Learn what supply chain malware is, how attackers abuse trusted software and vendors, and why supply chain attacks are so difficult to detect. 5 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/what-is-supply-chain-malware?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Jul 15](https://hashnode.com/posts/jscrambler-npm-supply-chain-attack/6a571c13d062c0f855500c21) ### [Jscrambler npm Compromise: Rust Infostealer in 5 Versions](https://404-founders.com/blog/jscrambler-npm-supply-chain-attack?utm_source=hashnode&utm_medium=feed) Jscrambler npm package compromised July 11, 2026. Rust-based infostealer in versions 8.14.0-8.20.0. Upgrade to 8.22.0 now. 5 min read · [404-founders.com](https://404-founders.com/blog/jscrambler-npm-supply-chain-attack?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Jun 23](https://hashnode.com/posts/oceanlotus-and-the-remarkable-strategic-shift-in-vietnam-s-cyberspace/6a39ece0531c833983b6b59f) ### [OceanLotus and the remarkable strategic shift in Vietnam's cyberspace](https://blog.fiscybersec.com/oceanlotus-and-the-remarkable-strategic-shift-in-vietnam-s-cyberspace?utm_source=hashnode&utm_medium=feed) Campaign overview For many years, OceanLotus (APT32) has been known as one of the most prominent cyber espionage groups in Southeast Asia, regularly appearing in reports about intelligence gathering a 14 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/oceanlotus-and-the-remarkable-strategic-shift-in-vietnam-s-cyberspace?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [May 11](https://hashnode.com/posts/11052026-cyber-security-briefly-news-critical-threat-convergence-linux-kernel-exploits-ai-supply-chain-hijacks-and-evolving-privacy-erosion/6a0194d68f89f94efe80542d) ### [11/05/2026 Cyber Security Briefly News - Critical Threat Convergence: Linux Kernel Exploits, AI Supply Chain Hijacks, and Evolving Privacy Erosion](https://blog.virusis.com/11052026-cyber-security-briefly-news-critical-threat-convergence-linux-kernel-exploits-ai-supply-chain-hijacks-and-evolving-privacy-erosion?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 5 min read · [blog.virusis.com](https://blog.virusis.com/11052026-cyber-security-briefly-news-critical-threat-convergence-linux-kernel-exploits-ai-supply-chain-hijacks-and-evolving-privacy-erosion?utm_source=hashnode&utm_medium=feed) [Virusis Blog](https://hashnode.com/@virusis) · [May 10](https://hashnode.com/posts/10052026-cyber-security-briefly-news-proliferating-supply-chain-attacks-pervasive-data-collection-demand-adaptive-cyber-defense/6a004358a88a35399eb76485) ### [10/05/2026 Cyber Security Briefly News - Proliferating Supply Chain Attacks & Pervasive Data Collection Demand Adaptive Cyber Defense](https://blog.virusis.com/10052026-cyber-security-briefly-news-proliferating-supply-chain-attacks-pervasive-data-collection-demand-adaptive-cyber-defense?utm_source=hashnode&utm_medium=feed) ⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros 5 min read · [blog.virusis.com](https://blog.virusis.com/10052026-cyber-security-briefly-news-proliferating-supply-chain-attacks-pervasive-data-collection-demand-adaptive-cyber-defense?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [May 8](https://hashnode.com/posts/chain-reaction-axios-attack-tryhackme/69fdb8e46fb09594bd364990) ### [Chain Reaction | Axios Attack (TryHackMe)](https://www.sharonjebitok.com/chain-reaction-axios-attack-tryhackme?utm_source=hashnode&utm_medium=feed) On March 31, 2026, two malicious versions of Axios — one of JavaScript's most downloaded HTTP client libraries — were quietly pushed to npm and downloaded by developers across the globe. What followed 21 min read · [sharonjebitok.com](https://www.sharonjebitok.com/chain-reaction-axios-attack-tryhackme?utm_source=hashnode&utm_medium=feed)