#supply-chain

Vulnerability

CRITICAL

React2Shell: The CVSS 10.0 That Hit 85,000 Servers

CVE-2025-55182 turned React Server Components into a one-request RCE. Nation-states and criminals moved within hours.

cve rce supply-chain +2

Jan 29, 2026 · 6 min read

Read

Tutorial

HIGH

I Audited Our GitHub Actions and Now I Can't Sleep

A look at the supply chain risks hiding in your CI/CD pipelines. Spoiler: it's worse than you think.

github-actions cicd supply-chain +1

Nov 2, 2025 · 5 min read

Read

Research

CRITICAL

The XZ Utils Backdoor: One Year Later, What Have We Learned?

A year after the discovery of the XZ Utils supply chain attack, examining what changed in open source security and what still keeps maintainers up at night.

supply-chain open-source backdoor +1

Mar 29, 2025 · 5 min read

Read