New GitHub, PyPI Policies Boost Supply Chain Security

SecurityWeek reports a mix of supply-chain security policy changes, active exploitation of a critical unauthenticated PTC Windchill unsafe deserialization vulnerability in ransomware campaigns, malware using hidden Windows desktops for covert remote access, credential harvesting through compromised public Wi-Fi gateways, and major ransomware and healthcare data breaches. Additional coverage includes AI security initiatives, mobile application SBOM analysis, and vulnerability research capabilities.