Software supply chain

November 2025

November 2025


Vol. 8, Iss. 44
Robin’s Newsletter #385
Vol. 8, Iss. 44

The human cost of MOD's Afghan data breach. Surprise deregulation of US telcos. New dependency bypass technique on npm developers.

September 2025

September 2025


Vol. 8, Iss. 39
Robin’s Newsletter #380
Vol. 8, Iss. 39

JLR secures line of credit for supply chain. US Secret Service uncovers 100,000 SIM farm. NCA arrests man in Collins Aerospace attack.


Vol. 8, Iss. 38
Robin’s Newsletter #379
Vol. 8, Iss. 38

European air travel disrupted by Collins Aerospace attack. Shai-Hulud npm worm infects 180+ packages. Microsoft's Entra ID verification clanger.

October 2024

October 2024


Vol. 7, Iss. 41
Robin’s Newsletter #330
Vol. 7, Iss. 41

Chinese actors compromised major US telcos. Marriott agrees to 20-year FTC settlement.


Vol. 7, Iss. 40
Robin’s Newsletter #329
Vol. 7, Iss. 40

LockBit arrests. Evil Corp linked to Russian intelligence. Meta Ray Bans used in creepy facial recognition concept.

July 2024

July 2024


Vol. 7, Iss. 27
Robin’s Newsletter #316
Vol. 7, Iss. 27

Unauthenticated RCE in OpenSSH. ShinyHunters release phone numbers of 33 million Authy users. Japan wins the 'war' on floppy disks.

July 2022

July 2022


Vol. 5, Iss. 28
Robin’s Newsletter #212
Vol. 5, Iss. 28

Apple's extreme 'Lockdown Mode' to protect against NSO Group. Apparent breach of 1 billion Chinese citizens data. Bad week for NPM ecosystem.

May 2022

May 2022


Vol. 5, Iss. 22
Robin’s Newsletter #206
Vol. 5, Iss. 22

Verizon DBIR 2022. ICO fines Clearview AI. Suspected leader of 'SilverTerrier' arrested. Fake IDs for everyone!

February 2021

February 2021


Vol. 4, Iss. 7
Robin’s Newsletter #139
Vol. 4, Iss. 7

Dependency confusion: all up in your package manager and automated build process. Florida water treatment plant compromised. Details of cyber-attacks on Isis. Bloomberg back again with The ~~Big~~ Long Hack.

June 2020

June 2020


Vol. 3, Iss. 25
Robins Newsletter #105
Vol. 3, Iss. 25

COVID-19 cyber threat update; IoT device vulnerabilities; how to spot like-farming!

May 2020

May 2020


Vol. 3, Iss. 22
Robins Newsletter #102
Vol. 3, Iss. 22

Cybercrime is boring; Capital One IR report isn't legally privileged; and easyJet target of £18Bn legal action.