All articles tagged with #supply chain security
A Tata Electronics data breach reportedly exposed 630GB of Apple iPhone 18 Pro documents, detailing the A20 Pro chip with WMCM packaging, relocated RAM for better thermal management, a larger vapor chamber, a 24MP front camera, under-display Face ID, advanced computational photography, and a new C2 modem enabling 5G over satellite (Ganymede)—all while underscoring security risks in Apple’s supply chain.
A clone of OpenAI's Privacy Filter on Hugging Face impersonated the legitimate model to distribute a Windows infostealer via a loader that downloads payloads through Base64, JSON Keeper, and PowerShell, then sets up a one-shot scheduled task to run the final malware and exfiltrate data (screenshots, crypto wallets, browser data) to a remote domain while attempting to evade detection by disabling AMSI/ETW; the repo peaked at #1 with about 244,000 downloads before being disabled, and researchers link it to similar loaders and ValleyRAT-related campaigns targeting open-source ecosystems.
USA Rare Earth will acquire Serra Verde in Goiás, Brazil, for $2.8 billion in a cash-and-stock deal, creating a fully integrated rare-earths platform in the US; Serra Verde is expected to account for about half of heavy rare earths outside China by 2027, underscoring Washington’s push to diversify critical minerals away from China.
A critical security vulnerability in the '@react-native-community/cli' npm package, affecting millions of developers, allowed remote attackers to execute arbitrary OS commands via the Metro development server. The flaw, tracked as CVE-2025-11953 with a CVSS score of 9.8, has been patched in version 20.0.0, highlighting the importance of security scanning in the software supply chain.
The US and Japan have established a framework to enhance cooperation in securing the supply of critical minerals and rare earths through joint investments, project development, regulatory streamlining, and international collaboration, aiming to strengthen their supply chains and support advanced technologies.
The US and Australia have established a framework to enhance cooperation and investment in securing the supply of critical minerals and rare earths vital for technology and defense industries, including joint project identification, financing, permitting reforms, and establishing a rapid response group to address supply vulnerabilities.