Supply-chain news — Is It Dead Yet?

Follow these headlines in your RSS/Atom reader. Included with Free; a verified account is required. Set up your feed → · Your profile →

Up to 50 matching topic groups, latest coverage first. Clear search

Recent headlines · 1

Last completed feed check: 2026-11-05T18:43:38.353Z.

3 sources could not be refreshed

Infostealers, CISA Alerts & Advisories, CERT-FR. They will be retried on the next poll.

News topics ordered by latest coverage; first recorded report, key topic, publisher and linked coverage
Latest · UTC	First report	Key topic	Publisher
11-05 12:06	Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day ↗CVE-2026-107441 · SecurityWeek · 2026-11-05 12:06 UTC 1 more reports First recorded report: SecurityWeek · 2026-11-05T10:56:41.000Z Related coverage: Patched Zyxel GS1900 switches remained open to in-the-wild exploit (CVE-2026-107441) ↗ Help Net Security · 2026-11-05 12:06 UTC Article mentions: CVE-2026-107441 No unambiguous tracked-package match.	CVE-2026-107441	SecurityWeek

Reviewed incident reports · 0

Last reviewed 2026-10-08. Selected historical incidents; a past compromise does not establish that a current release is compromised.

No reviewed stories match these filters. This does not mean no incidents have occurred.

About this feed and search

Search stored headlines, publishers, article mentions and matched package names, plus reviewed-report summaries. Full article bodies are not searchable. Coverage with the same specific topic is grouped within a 72-hour episode. Each row links to its earliest recorded report; later coverage is linked under Details. Roundups, generic platforms and separate campaign waves are not merged on a broad mention alone. Multiple reports are not independent corroboration. Ecosystem filtering uses package matches, so unmatched articles are excluded when you select an ecosystem.

Article mentions identify terms, not confirmed affected products or versions. Package links are automated leads, not confirmed vulnerability findings. Maintenance checks do not prove an affected version is safe.

Selected vulnerability advisories · 0

Sources and package mappings checked 2026-10-08. This is a manually reviewed selection of historical advisories, not a current exploitation ranking or complete CVE database. The news headlines above update separately.

An identity match is a reason to investigate, not confirmation that your installed release is vulnerable. Manifest checks do not establish runtime configuration or resolve every transitive dependency.

Vulnerability	Product / package relationship

No selected advisories match these filters. This is not a security clearance.

Runtime advisories on OpenCVE

Browse CVEs by vendor and product. Runtime CVEs do not automatically apply to every package in that ecosystem; verify affected versions and configurations.

News sources · 81 configured feeds

The news worker checks for due feeds one minute after each completed run. Individual feeds use one-, two- or ten-minute intervals; slow requests can delay a check. Clear tracked-package mentions trigger priority checks; they do not establish that an installed version is vulnerable. Sources without an RSS link and Feedspot’s directory are browsing resources. Reviewed reports above remain curated.

Security news and research

Recent headlines · 1

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day ↗CVE-2026-107441 · SecurityWeek · 2026-11-05 12:06 UTC