Supply-chain news — Is It Dead Yet?

Follow these headlines in your RSS/Atom reader. Included with Free; a verified account is required. Set up your feed → · Your profile →

Up to 50 matching topic groups, latest coverage first. Clear search

Recent headlines · 50

Last completed feed check: 2026-11-05T23:28:43.156Z.

2 sources could not be refreshed

Infostealers, CERT-FR. They will be retried on the next poll.

News topics ordered by latest coverage; first recorded report, key topic, publisher and linked coverage
Latest · UTC	First report	Key topic	Publisher
11-05 22:08	Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers ↗Ransomware · The Record by Recorded Future · 2026-11-05 22:08 UTC	Ransomware	The Record by Recorded Future
11-05 12:10	New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark ↗Ransomware · The Register Security · 2026-11-05 12:10 UTC	Ransomware	The Register Security
11-03 16:31	Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions ↗CVE-2024-10441 +2 · Security Affairs · 2026-11-03 16:31 UTC Details Article mentions: CVE-2024-10441 · CVE-2024-50629 · CVE-2024-10445 No unambiguous tracked-package match.	CVE-2024-10441 +2	Security Affairs
11-03 14:00	UK school estate hit by 3AM ransomware in suspected AI-assisted attack ↗AI security · BleepingComputer · 2026-11-03 14:00 UTC	AI security	BleepingComputer
11-03 13:59	Assured helps recovery teams find clean backups after ransomware attacks ↗Ransomware · Help Net Security · 2026-11-03 13:59 UTC	Ransomware	Help Net Security
11-03 12:39	Britain on notice: AI-powered ransomware attacks to arrive by 2028 ↗AI security · The Register Security · 2026-11-03 12:39 UTC	AI security	The Register Security
11-03 07:43	Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw ↗Ransomware · The Hacker News · 2026-11-03 07:43 UTC	Ransomware	The Hacker News
11-02 19:54	Michigan State cyber incident claimed by ransomware gang behind recent hospital attack ↗Ransomware · The Record by Recorded Future · 2026-11-02 19:54 UTC	Ransomware	The Record by Recorded Future
11-02 11:28	Synology warns of C3RB3R ransomware attacks targeting NAS devices ↗Ransomware · BleepingComputer · 2026-11-02 11:28 UTC	Ransomware	BleepingComputer
11-02 05:00	Ransomware gang talked AI agents into doing much of its dirty work ↗AI security · Help Net Security · 2026-11-02 05:00 UTC	AI security	Help Net Security
10-30 09:29	Synology NAS-systemen via oud lek getroffen door ransomware-aanvallen ↗Ransomware · Security.NL · 2026-10-30 09:29 UTC	Ransomware	Security.NL
10-30 09:29	Synology NAS-systemen via oud beveiligingslek getroffen door ransomware ↗Ransomware · Security.NL · 2026-10-30 09:29 UTC	Ransomware	Security.NL
10-29 14:00	IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases ↗CVE-2023-20198 · Cisco Talos Intelligence · 2026-10-29 14:00 UTC Details Article mentions: CVE-2023-20198 No unambiguous tracked-package match.	CVE-2023-20198	Cisco Talos Intelligence
10-28 20:19	Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail ↗Ransomware · Security Affairs · 2026-10-28 20:19 UTC	Ransomware	Security Affairs
10-28 16:58	Ransomware Negotiator Arrests Add Scrutiny to Shadowy Industry ↗Ransomware · Bloomberg Technology · 2026-10-28 16:58 UTC	Ransomware	Bloomberg Technology
10-28 15:52	Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles ↗Ransomware · The Register Security · 2026-10-28 15:52 UTC	Ransomware	The Register Security
10-28 15:05	Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison ↗Ransomware · SecurityWeek · 2026-10-28 15:05 UTC	Ransomware	SecurityWeek
10-28 12:17	Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator ↗Ransomware · Help Net Security · 2026-10-28 12:17 UTC	Ransomware	Help Net Security
10-28 10:04	36-jarige man krijgt 70 maanden cel voor wereldwijde ransomware-aanvallen ↗Ransomware · Security.NL · 2026-10-28 10:04 UTC	Ransomware	Security.NL
10-28 09:43	Nefilim and Hive ransomware affiliate gets 70 months in prison ↗Ransomware · BleepingComputer · 2026-10-28 09:43 UTC	Ransomware	BleepingComputer
10-27 23:35	Japan's GMO urges customers to shut down PCs amid ransomware threat ↗Ransomware · BleepingComputer · 2026-10-27 23:35 UTC	Ransomware	BleepingComputer
10-27 22:07	UNM Health ransomware attack disrupts patient care, surgeries ↗Ransomware · BleepingComputer · 2026-10-27 22:07 UTC	Ransomware	BleepingComputer
10-27 20:40	Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea ↗Ransomware · The Record by Recorded Future · 2026-10-27 20:40 UTC	Ransomware	The Record by Recorded Future
10-27 18:33	Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison ↗Ransomware · CyberScoop · 2026-10-27 18:33 UTC	Ransomware	CyberScoop
10-27 10:00	What happens when security tools go dark before the ransomware ↗Ransomware · CyberScoop · 2026-10-27 10:00 UTC	Ransomware	CyberScoop
10-26 15:52	Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware ↗Ransomware · The Hacker News · 2026-10-26 15:52 UTC	Ransomware	The Hacker News
10-23 17:50	Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions ↗AI security · The Hacker News · 2026-10-23 17:50 UTC	AI security	The Hacker News
10-23 14:23	In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware ↗AI security · SecurityWeek · 2026-10-23 14:23 UTC	AI security	SecurityWeek
10-23 03:43	Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies ↗Roundup · Risky Business News · 2026-10-23 03:43 UTC	Roundup	Risky Business News
10-22 06:48	FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations ↗Ransomware · Security Affairs · 2026-10-22 06:48 UTC	Ransomware	Security Affairs
10-21 14:45	High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 ↗Ransomware · SecurityWeek · 2026-10-21 14:45 UTC	Ransomware	SecurityWeek
10-21 14:30	Verzekeringsmaatschappij moet losgeld ransomware-aanval vergoeden ↗Ransomware · Security.NL · 2026-10-21 14:30 UTC	Ransomware	Security.NL
10-21 11:13	Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA ↗CVE-2026-0257 · The Hacker News · 2026-10-21 11:13 UTC 2 more reports First recorded report: The Hacker News · 2026-10-20T15:32:27.000Z Related coverage: Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) ↗ Unit 42 by Palo Alto Networks · 2026-10-20 20:30 UTC Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June ↗ Help Net Security · 2026-10-21 11:13 UTC Article mentions: CVE-2026-0257 No unambiguous tracked-package match.	CVE-2026-0257	The Hacker News
10-21 10:14	FBI: zeker zeshonderd vitale organisaties slachtoffer SafePay-ransomware ↗Ransomware · Security.NL · 2026-10-21 10:14 UTC	Ransomware	Security.NL
10-21 08:36	CISA: SafePay ransomware hit over 600 critical infrastructure orgs ↗Ransomware · BleepingComputer · 2026-10-21 08:36 UTC	Ransomware	BleepingComputer
10-20 20:27	FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024 ↗Ransomware · The Record by Recorded Future · 2026-10-20 20:27 UTC	Ransomware	The Record by Recorded Future
10-20 17:33	Palo Alto's firewall OS has been under attack from multiple ransomware groups since June ↗CVE-2023-27532 +1 · The Register Security · 2026-10-20 17:33 UTC Details Article mentions: CVE-2026-0257 · CVE-2023-27532 No unambiguous tracked-package match.	CVE-2023-27532 +1	The Register Security
10-20 12:00	#StopRansomware: SafePay Ransomware ↗CVE-2020-3259 +4 · CISA Alerts & Advisories · 2026-10-20 12:00 UTC Details Article mentions: CVE-2020-3259 · CVE-2023-20269 · CVE-2023-27532 · CVE-2024-40711 · CVE-2024-40766 No unambiguous tracked-package match.	CVE-2020-3259 +4	CISA Alerts & Advisories
10-19 04:00	Ransomware pressure now reaches employees’ homes and families ↗Ransomware · Help Net Security · 2026-10-19 04:00 UTC	Ransomware	Help Net Security
10-16 14:00	When Your Ransomware Negotiator Works for the Other Side ↗Ransomware · Dark Reading · 2026-10-16 14:00 UTC	Ransomware	Dark Reading
10-16 13:05	Baltimore suburb confirms August data breach after ransomware claims ↗Ransomware · The Record by Recorded Future · 2026-10-16 13:05 UTC	Ransomware	The Record by Recorded Future
10-14 05:00	Ransomware Gangs Embrace Physical Threats, Family Stalking? ↗Ransomware · Dark Reading · 2026-10-14 05:00 UTC	Ransomware	Dark Reading
10-14 05:00	Ransomware gets personal: 'We-know-where-you-are kind of stuff' ↗Ransomware · The Register Security · 2026-10-14 05:00 UTC	Ransomware	The Register Security
10-12 21:26	Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe ↗ShinyHunters · SecurityWeek · 2026-10-12 21:26 UTC 2 more reports First recorded report: SecurityWeek · 2026-10-12T10:32:05.000Z Related coverage: ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More ↗ The Hacker News · 2026-10-12 15:16 UTC ShinyHunters arrest number three: a Canadian ransomware negotiator ↗ Security Affairs · 2026-10-12 21:26 UTC No unambiguous tracked-package match.	ShinyHunters	SecurityWeek
10-12 20:00	Prominent Ransomware Negotiator Faces Extortion Charges ↗Ransomware · Dark Reading · 2026-10-12 20:00 UTC	Ransomware	Dark Reading
10-10 00:17	FBI Arrests Executive at Ransomware Negotiation Firm ↗Ransomware · Krebs on Security · 2026-10-10 00:17 UTC	Ransomware	Krebs on Security
10-09 18:45	Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany ↗Qilin · SecurityWeek · 2026-10-09 18:45 UTC 2 more reports First recorded report: SecurityWeek · 2026-10-07T13:47:12.000Z Related coverage: Japan confirms arrest of Russian Qilin operative, extradition to Germany ↗ The Record by Recorded Future · 2026-10-09 18:45 UTC Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention ↗ Security Affairs · 2026-10-09 18:45 UTC No unambiguous tracked-package match.	Qilin	SecurityWeek
10-09 15:38	Germany arrests alleged core Qilin ransomware member after extradition ↗Qilin · BleepingComputer · 2026-10-09 15:38 UTC	Qilin	BleepingComputer
10-08 20:09	Ransomware attack disrupts Japan's IDCF Cloud used by govt clients ↗Ransomware · BleepingComputer · 2026-10-08 20:09 UTC	Ransomware	BleepingComputer
10-08 19:44	Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions ↗Ransomware · CyberScoop · 2026-10-08 19:44 UTC	Ransomware	CyberScoop

Reviewed incident reports · 0

Last reviewed 2026-10-08. Selected historical incidents; a past compromise does not establish that a current release is compromised.

No reviewed stories match these filters. This does not mean no incidents have occurred.

About this feed and search

Search stored headlines, publishers, article mentions and matched package names, plus reviewed-report summaries. Full article bodies are not searchable. Coverage with the same specific topic is grouped within a 72-hour episode. Each row links to its earliest recorded report; later coverage is linked under Details. Roundups, generic platforms and separate campaign waves are not merged on a broad mention alone. Multiple reports are not independent corroboration. Ecosystem filtering uses package matches, so unmatched articles are excluded when you select an ecosystem.

Article mentions identify terms, not confirmed affected products or versions. Package links are automated leads, not confirmed vulnerability findings. Maintenance checks do not prove an affected version is safe.

Selected vulnerability advisories · 0

Sources and package mappings checked 2026-10-08. This is a manually reviewed selection of historical advisories, not a current exploitation ranking or complete CVE database. The news headlines above update separately.

An identity match is a reason to investigate, not confirmation that your installed release is vulnerable. Manifest checks do not establish runtime configuration or resolve every transitive dependency.

Vulnerability	Product / package relationship

No selected advisories match these filters. This is not a security clearance.

Runtime advisories on OpenCVE

Browse CVEs by vendor and product. Runtime CVEs do not automatically apply to every package in that ecosystem; verify affected versions and configurations.

News sources · 81 configured feeds

The news worker checks for due feeds one minute after each completed run. Individual feeds use one-, two- or ten-minute intervals; slow requests can delay a check. Clear tracked-package mentions trigger priority checks; they do not establish that an installed version is vulnerable. Sources without an RSS link and Feedspot’s directory are browsing resources. Reviewed reports above remain curated.

Security news and research

Recent headlines · 50

Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers ↗Ransomware · The Record by Recorded Future · 2026-11-05 22:08 UTC

New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark ↗Ransomware · The Register Security · 2026-11-05 12:10 UTC

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions ↗CVE-2024-10441 +2 · Security Affairs · 2026-11-03 16:31 UTC

UK school estate hit by 3AM ransomware in suspected AI-assisted attack ↗AI security · BleepingComputer · 2026-11-03 14:00 UTC

Assured helps recovery teams find clean backups after ransomware attacks ↗Ransomware · Help Net Security · 2026-11-03 13:59 UTC

Britain on notice: AI-powered ransomware attacks to arrive by 2028 ↗AI security · The Register Security · 2026-11-03 12:39 UTC

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw ↗Ransomware · The Hacker News · 2026-11-03 07:43 UTC

Michigan State cyber incident claimed by ransomware gang behind recent hospital attack ↗Ransomware · The Record by Recorded Future · 2026-11-02 19:54 UTC

Synology warns of C3RB3R ransomware attacks targeting NAS devices ↗Ransomware · BleepingComputer · 2026-11-02 11:28 UTC

Ransomware gang talked AI agents into doing much of its dirty work ↗AI security · Help Net Security · 2026-11-02 05:00 UTC

Synology NAS-systemen via oud lek getroffen door ransomware-aanvallen ↗Ransomware · Security.NL · 2026-10-30 09:29 UTC

Synology NAS-systemen via oud beveiligingslek getroffen door ransomware ↗Ransomware · Security.NL · 2026-10-30 09:29 UTC

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases ↗CVE-2023-20198 · Cisco Talos Intelligence · 2026-10-29 14:00 UTC

Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail ↗Ransomware · Security Affairs · 2026-10-28 20:19 UTC

Ransomware Negotiator Arrests Add Scrutiny to Shadowy Industry ↗Ransomware · Bloomberg Technology · 2026-10-28 16:58 UTC

Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles ↗Ransomware · The Register Security · 2026-10-28 15:52 UTC

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison ↗Ransomware · SecurityWeek · 2026-10-28 15:05 UTC

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator ↗Ransomware · Help Net Security · 2026-10-28 12:17 UTC

36-jarige man krijgt 70 maanden cel voor wereldwijde ransomware-aanvallen ↗Ransomware · Security.NL · 2026-10-28 10:04 UTC

Nefilim and Hive ransomware affiliate gets 70 months in prison ↗Ransomware · BleepingComputer · 2026-10-28 09:43 UTC

Japan's GMO urges customers to shut down PCs amid ransomware threat ↗Ransomware · BleepingComputer · 2026-10-27 23:35 UTC

UNM Health ransomware attack disrupts patient care, surgeries ↗Ransomware · BleepingComputer · 2026-10-27 22:07 UTC

Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea ↗Ransomware · The Record by Recorded Future · 2026-10-27 20:40 UTC

Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison ↗Ransomware · CyberScoop · 2026-10-27 18:33 UTC

What happens when security tools go dark before the ransomware ↗Ransomware · CyberScoop · 2026-10-27 10:00 UTC

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware ↗Ransomware · The Hacker News · 2026-10-26 15:52 UTC

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions ↗AI security · The Hacker News · 2026-10-23 17:50 UTC

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware ↗AI security · SecurityWeek · 2026-10-23 14:23 UTC

Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies ↗Roundup · Risky Business News · 2026-10-23 03:43 UTC

FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations ↗Ransomware · Security Affairs · 2026-10-22 06:48 UTC

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 ↗Ransomware · SecurityWeek · 2026-10-21 14:45 UTC

Verzekeringsmaatschappij moet losgeld ransomware-aanval vergoeden ↗Ransomware · Security.NL · 2026-10-21 14:30 UTC

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA ↗CVE-2026-0257 · The Hacker News · 2026-10-21 11:13 UTC

FBI: zeker zeshonderd vitale organisaties slachtoffer SafePay-ransomware ↗Ransomware · Security.NL · 2026-10-21 10:14 UTC

CISA: SafePay ransomware hit over 600 critical infrastructure orgs ↗Ransomware · BleepingComputer · 2026-10-21 08:36 UTC

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024 ↗Ransomware · The Record by Recorded Future · 2026-10-20 20:27 UTC

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June ↗CVE-2023-27532 +1 · The Register Security · 2026-10-20 17:33 UTC

#StopRansomware: SafePay Ransomware ↗CVE-2020-3259 +4 · CISA Alerts & Advisories · 2026-10-20 12:00 UTC

Ransomware pressure now reaches employees’ homes and families ↗Ransomware · Help Net Security · 2026-10-19 04:00 UTC

When Your Ransomware Negotiator Works for the Other Side ↗Ransomware · Dark Reading · 2026-10-16 14:00 UTC

Baltimore suburb confirms August data breach after ransomware claims ↗Ransomware · The Record by Recorded Future · 2026-10-16 13:05 UTC

Ransomware Gangs Embrace Physical Threats, Family Stalking? ↗Ransomware · Dark Reading · 2026-10-14 05:00 UTC

Ransomware gets personal: 'We-know-where-you-are kind of stuff' ↗Ransomware · The Register Security · 2026-10-14 05:00 UTC

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe ↗ShinyHunters · SecurityWeek · 2026-10-12 21:26 UTC

Prominent Ransomware Negotiator Faces Extortion Charges ↗Ransomware · Dark Reading · 2026-10-12 20:00 UTC

FBI Arrests Executive at Ransomware Negotiation Firm ↗Ransomware · Krebs on Security · 2026-10-10 00:17 UTC

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany ↗Qilin · SecurityWeek · 2026-10-09 18:45 UTC

Germany arrests alleged core Qilin ransomware member after extradition ↗Qilin · BleepingComputer · 2026-10-09 15:38 UTC

Ransomware attack disrupts Japan's IDCF Cloud used by govt clients ↗Ransomware · BleepingComputer · 2026-10-08 20:09 UTC

Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions ↗Ransomware · CyberScoop · 2026-10-08 19:44 UTC