https://infosecpwn.com/tags/supply-chain/ Recent content in Supply-Chain on infosecpwn https://infosecpwn.com/og-default.png https://infosecpwn.com/og-default.png Hugo en-us Mon, 26 Oct 2026 13:36:00 +0000 https://infosecpwn.com/news/2026-10-26/ Mon, 26 Oct 2026 13:36:00 +0000 https://infosecpwn.com/news/2026-10-26/ PHP2Shell now has confirmed in-the-wild code execution. Patch PHP today, mod_php hosts first, then FortiOS before Fortinet publishes details on 10 November. https://infosecpwn.com/news/2026-10-24/ Sat, 24 Oct 2026 16:55:00 +0000 https://infosecpwn.com/news/2026-10-24/ Upgrade or remove Nextcloud's built-in Collabora CODE app today: it is exploited and in KEV, due Monday. Then disable PHP session upload progress. https://infosecpwn.com/news/2026-10-23/ Fri, 23 Oct 2026 10:30:00 +0000 https://infosecpwn.com/news/2026-10-23/ Patch on-prem VeloCloud Orchestrator now: it is being exploited. Then upgrade Node.js for the Brotli bug and rotate anything stored in Railway. https://infosecpwn.com/news/2026-10-22/ Thu, 22 Oct 2026 13:20:52 +0000 https://infosecpwn.com/news/2026-10-22/ If you installed LiteLLM 1.107.0 or pulled its latest image on 21 Oct, treat the host as compromised. Then patch PHP and self-managed GitLab. https://infosecpwn.com/news/2026-10-21/ Wed, 21 Oct 2026 21:00:00 +0000 https://infosecpwn.com/news/2026-10-21/ Upgrade PHP today (mod_php first) and move certificates off emSign ECC Root CA - G3 before 27 Oct. Plus ransomware on GlobalProtect and exploited Plex.