Canvas, Trellix, Mini Shai-Hulud: How Defenders Respond When Supply Chain Attacks Become Weekly

About this episode

The episode discusses the rise in supply chain attacks and the challenges defenders face after suppliers are compromised.

What's driving the surge in weekly supply chain attacks, and why does the real defender problem start after the supplier gets hit? With 275 million records exposed and 8,809 institutions caught in the downstream fallout, organizations need a new playbook. Join hosts Alexandra and John as they discuss: How ShinyHunters abused admin sessionsRansomHouse's hypervisor-focused automationHow Mini Shai-Hulud compromised 170+ npm packages Two questions your organization should be asking right now...

People in this episode

Hosts: Alexandra, John

Topics covered

• supply chain attacks
• cybersecurity
• data exposure
• defender challenges
• automation in attacks
• npm package security

Keywords

• supply chain
• cybersecurity
• data breach
• defenders
• automation
• npm packages
• ShinyHunters
• RansomHouse

Mentioned in this episode

Organizations: ShinyHunters, RansomHouse

Products: Mini Shai-Hulud

Places: npm

More episodes of ShadowTalk: Powered by ReliaQuest

• China-Linked Cyber Espionage: How OP-512 Exploited Legacy IIS Servers and Evaded Detection · June 10, 2026 · 23 min
• SonicWall, MFA Bypass, IABs: Why Patched Devices Are Still Handing Attackers Initial Access · June 3, 2026 · 21 min
• Device Code, OAuth, PhaaS: How Session Token Theft is Breaking the Phishing Playbook · May 27, 2026 · 29 min
• SQLite, Mistral, OpenAI: How AI Attacks Are Reshaping the Attack Surface · May 20, 2026 · 20 min
• Akira, ShinyHunters, and The Gentlemen: Extortion Lessons From Early 2026 · May 6, 2026 · 35 min
• What Happened to Black Basta's Playbook? The Automated Teams Phishing Threat Hitting Executives · April 29, 2026 · 27 min