Reflecting on supply chain attacks halfway through 2023
Summary: Cisco Talos used its mid-2023 review to flag that supply chain attacks, including MOVEit, 3CX and CircleCI, had faded from the headlines even as the MOVEit breach touched nearly every Fortune 500 company and Clop began leaking stolen data via torrents. The same newsletter described a suspected Vietnamese threat actor running a Yashma ransomware variant since at least June 4, which pulls its ransom note from an actor-controlled GitHub repository and doubles the Bitcoin demand if unpaid within three days.
Why it matters: MOVEit reached nearly every Fortune 500 company, yet the coverage settled into routine 'Company X added to the Clop leak site' posts, and Clop's move to torrent-based leaks makes that stolen data faster and easier for other actors to pull down.
Read the original at Cisco Talos ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026