Supply Chain Attacks and Software Integrity

Ongoing supply-chain compromises: GlassWorm worm, Shai-Hulud npm worm fourth wave, TeamPCP backdooring dev tools, Zimbra SNMP RCE actively exploited (CISA KEV). New vectors include car infotainment malware (DoFun) and hardware backdoors in Slovak cameras. SickKids breach via third-party careers portal adds to healthcare supply-chain risks. Patching remains critical.