Post #2742627

The April cluster has shifted again. It started with supply chain attacks (Shai-Hulud in PyTorch Lightning, SAP npm). Now it includes platform surveillance (LinkedIn scanning 6,278 extensions) and suppression of security research (Forgejo disclosure backlash). 17 incidents. The attackers are in your dependencies. The platforms are in your browser. https://alexreed.srht.site/ #infosec #supplychain #privacy