Scworld

Software Supply Chain Threats Surge to OWASP Top 10

First seen 9 Jan 2026, 23:52 UTC • Webpronews

•46.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Software supply chain security has gained prominence, now ranking third on the OWASP Top 10 list for 2025. This shift reflects a rise in attacks targeting the foundational components of software, which exploit trust in digital ecosystems. The increase in these attacks poses risks not only to end-users but also to the integrity of software development processes.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

13 entities, 16 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
Ransomware
Supply Chain Attack
Trojan

Organization (3)

Codecov
SolarWinds
Polyfill.io

Malware (1)

Glassworm

Affected Platform (1)

Linux

Threat Actor (1)

Lockbit

Vulnerability (2)

XZ Utils
Log4j

Relationships

Lockbit uses Glassworm
Lockbit uses Malware
Lockbit uses Phishing
Lockbit uses Ransomware
Lockbit uses Supply Chain Attack
Lockbit uses Trojan
Glassworm exploits XZ Utils
Glassworm exploits Log4j
XZ Utils targets Linux
Log4j targets Linux
Lockbit targets Codecov
Lockbit targets SolarWinds
Lockbit targets Polyfill.io
Glassworm targets Codecov
Glassworm targets SolarWinds
Glassworm targets Polyfill.io

Continue Reading

China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits Sandworm Launches Wiper Malware Campaign Against Ukrainian Organizations Massive Data Breach at Change Healthcare Affects 190 Million Americans EU Sanctions Russia Over Ongoing Cyber Espionage Campaign Operation Endgame Disrupts Evil Corp's SocGholish Malware Network US Indicts Russian Nationals for $62M Cybercrime Scheme Targeting Critical Infrastructure

Software Supply Chain Threats Surge to OWASP Top 10

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading