Dependabot

Reported Context (1)

Dependabot Native Cooldowns (July 2026): Dependabot now enforces a default three-day cooldown on version updates to allow for the public discovery of upstream compromises (such as the historical chalk and debug Google and Mandiant Urge Stronger Defenses as Open-Source Supply-Chain Attacks Grow

Malware (6)

People (4)

Threat Actors (10)

MITRE ATT&CK (2)

Vendors (4)

Products (12)

Tools (1)

Industries (6)

Countries (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.