Software supply chain

August 2026

August 2026


Vol. 9, Iss. 32
Robin’s Newsletter #424
Vol. 9, Iss. 32

More AI agent incidents surface. Iranian attacks on US water expand. $88 million stolen via flaw in hardware cryptocurrency wallets.

July 2026

July 2026


Vol. 9, Iss. 31
Robin’s Newsletter #423
Vol. 9, Iss. 31

Anthropic says Claude broke into three orgs. Co-ordinated attack against 30 Minnesota water systems. Google Earth GenAI is a lesson in product design.

May 2026

May 2026


Vol. 9, Iss. 20
Robin’s Newsletter #413
Vol. 9, Iss. 20

BitLocker encryption busted, OpenAI announces Daybreak, and UK Gov signals Computer Misuse reform.

March 2026

March 2026


Vol. 9, Iss. 13
Robin’s Newsletter #406
Vol. 9, Iss. 13

TeamPCP software supply-chain attacks widen, target Iran with crude wiper. US bans foreign-made routers. FBI director Kash Patel email's compromised.

November 2025

November 2025


Vol. 8, Iss. 44
Robin’s Newsletter #385
Vol. 8, Iss. 44

The human cost of MOD's Afghan data breach. Surprise deregulation of US telcos. New dependency bypass technique on npm developers.

September 2025

September 2025


Vol. 8, Iss. 39
Robin’s Newsletter #380
Vol. 8, Iss. 39

JLR secures line of credit for supply chain. US Secret Service uncovers 100,000 SIM farm. NCA arrests man in Collins Aerospace attack.


Vol. 8, Iss. 38
Robin’s Newsletter #379
Vol. 8, Iss. 38

European air travel disrupted by Collins Aerospace attack. Shai-Hulud npm worm infects 180+ packages. Microsoft's Entra ID verification clanger.

October 2024

October 2024


Vol. 7, Iss. 41
Robin’s Newsletter #330
Vol. 7, Iss. 41

Chinese actors compromised major US telcos. Marriott agrees to 20-year FTC settlement.


Vol. 7, Iss. 40
Robin’s Newsletter #329
Vol. 7, Iss. 40

LockBit arrests. Evil Corp linked to Russian intelligence. Meta Ray Bans used in creepy facial recognition concept.

July 2024

July 2024


Vol. 7, Iss. 27
Robin’s Newsletter #316
Vol. 7, Iss. 27

Unauthenticated RCE in OpenSSH. ShinyHunters release phone numbers of 33 million Authy users. Japan wins the 'war' on floppy disks.

July 2022

July 2022


Vol. 5, Iss. 28
Robin’s Newsletter #212
Vol. 5, Iss. 28

Apple's extreme 'Lockdown Mode' to protect against NSO Group. Apparent breach of 1 billion Chinese citizens data. Bad week for NPM ecosystem.

May 2022

May 2022


Vol. 5, Iss. 22
Robin’s Newsletter #206
Vol. 5, Iss. 22

Verizon DBIR 2022. ICO fines Clearview AI. Suspected leader of 'SilverTerrier' arrested. Fake IDs for everyone!

February 2021

February 2021


Vol. 4, Iss. 7
Robin’s Newsletter #139
Vol. 4, Iss. 7

Dependency confusion: all up in your package manager and automated build process. Florida water treatment plant compromised. Details of cyber-attacks on Isis. Bloomberg back again with The ~~Big~~ Long Hack.

June 2020

June 2020


Vol. 3, Iss. 25
Robins Newsletter #105
Vol. 3, Iss. 25

COVID-19 cyber threat update; IoT device vulnerabilities; how to spot like-farming!

May 2020

May 2020


Vol. 3, Iss. 22
Robins Newsletter #102
Vol. 3, Iss. 22

Cybercrime is boring; Capital One IR report isn't legally privileged; and easyJet target of £18Bn legal action.