supply chain news
6 stories
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
The Cl0p ransomware group claims to have compromised over 40 organizations by exploiting a critical vulnerability in PTC's Windchill and FlexPLM product lifecycle management (PLM) software. This vulnerability, identified as CVE-2026-12569, is a remote code execution (RCE) flaw with a CVSS score of 9.3, stemming from the deserialization of untrusted data. It affects all CPS versions and…
Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports
The U.S. Coast Guard is actively monitoring a cyberattack that disrupted gate operations at all three North Carolina port facilities this week. The incident, which began earlier in the week, affected the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port.
Cyberattack Disrupts Operations at Japanese Food Giant Nichirei
Nichirei Corporation, a major Japanese food company, confirmed that a cyberattack on its servers on July 13, 2026, disrupted its logistics and shipment operations. The Tokyo-headquartered company, founded in 1942 and known for its frozen food business, operates globally through numerous subsidiaries.
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
A cyberespionage group with suspected ties to Iran has been observed employing a flexible, modular command-and-control (C2) framework to conduct attacks. The group has focused its efforts on compromising information technology service providers as a means to gain access to more valuable targets, particularly those located in Israel.
AI Hallucinations Create Phantom Domains for Supply Chain Attacks
Large language models (LLMs) have been found to consistently generate nonexistent web domains for legitimate brands, a phenomenon researchers are calling "phantom squatting." Adversaries are actively registering these AI-hallucinated domains to intercept traffic, posing a significant new risk to the software supply chain.
OpenClaw Skill Marketplace Faces AI Supply Chain Threat
OpenClaw, a platform for AI agents that execute third-party skills from its dedicated marketplace, ClawHub, has been targeted by persistent and evolving malicious campaigns. These attacks leverage the unique architecture of AI agent ecosystems, where skills, defined by markdown-driven packages, possess broad access to local systems, making ClawHub a critical vulnerability in the agentic…