Supply Chain Attack

triada malware

Triada Malware Preloaded on Counterfeit Androids Hijacks 2,600+ Devices for Crypto Theft and Espionage

Over 2,600 Android devices were infected by a preloaded version of the Triada malware in March 2025. The malware, embedded during manufacturing of counterfeit smartphones, grants full remote access, enabling crypto theft, social media hijacking, and botnet control.

GitHub Actions

GitHub Action Vulnerability: Supply Chain Attack Exposes Limited Secrets, Raises Broader Concerns

A recent supply chain attack targeting the popular GitHub Action, tj-actions/changed-files, has reportedly exposed secrets in a relatively small subset of the approximately 23,000 repositories utilizing the tool.