Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

Unit 42 RSS intelligence covering emerging threats across software development and CI/CD supply chains, enterprise identity and credential abuse, Android IoT botnets, blockchain-based command and control, npm and macOS developer-targeting malware, AI-assisted exploitation, direct-IP malware communications, authentication implementation weaknesses, webmail espionage, and Siemens OT zero-days. The collection includes active exploitation and high-impact attack techniques, but no specific CVE identifiers are provided in the feed metadata.