
Protejan sus activos: Guía de mitigación para la vulnerabilidad de la cadena de suministro
POR
Mandiant
FUENTE
Cloud Blog
DATE
READ
1 min de lectura
Los analistas de ciberseguridad informan de un aumento significativo en los ataques a la cadena de suministro de código abierto (2025-26), que explotan repositorios, npm, PyPI y Docker Hub. Grupos como UNC6780 y actores …
Organizations should implement multi-tiered defensive strategies that directly address this threat vector. This includes continuous verification and monitoring of software supply chain risks. Automated integration with native platform-level controls such as Dependabot, PyPI and npm’s default configurations, and strong network segmentation and egress controls are essential. Organizations should also focus on software bill of materials (SBOM) management, vulnerability scanning, and proactive threat hunting. Continuous assessment and adaptation of security practices are crucial in the face of evolving threats.