Archive

A supply chain compromise in the Rust ecosystem is being linked to build pipelines used around Solana-related projects. For defenders, this is an application and software-supply-chain exposure that raises the need to review build dependencies, signing, and package verification in affected development workflows.

Nissan says employee data was exposed after a cyberattack affecting Oracle PeopleSoft. For defenders, this is a reminder that third-party enterprise applications can become the path to sensitive HR data even when the victim is a large manufacturer rather than the software vendor itself.