The notorious hacking group used the Halloween tragedy that killed more than 150 people to trick South Koreans into downloading malware.

The group used six backdoors against more than a dozen industrial plants, research institutes and government agencies, according to Kaspersky.

“Reduced exposure to malicious activity” for U.S. organizations is the goal.

The lawmakers are hoping to crack open a cold case and learn from it before the next big supply-chain breach happens.

The discovery underscores the extent to which SolarWinds, whose customers include Fortune 500 companies, is a valuable target for hackers.

Researchers at Trend Micro say a newly discovered MacOS backdoor uses tactics previously associated with the group known as APT32 or OceanLotus.

A point-of-sale-system widely used in the hospitality industry is vulnerable to a backdoor, ESET reports.

A Chinese bank required a company to use a specific kind of tax software for local tax purposes, but the software deployed a backdoor, Trustwave researchers say.

It's an example of the potentially insidious nature of open-source supply chain compromises.

Turla has a knack for rewriting code and using it to steal state secrets.