News Summary

• Heisenberg is an open-source tool that checks the health of a software supply chain.
• A new study shows that steady, mandatory phishing training can cut risky behavior over time.
• Cybercriminals are compromising logistics and trucking companies by tricking them into installing remote monitoring tools.
• A spear-phishing campaign aimed to compromise Russian and Belarusian military personnel has been flagged by Cyble and Seqrite security researchers.
• The goal of the campaign is to get targets to download and open a booby-trapped LNK file masquerading as a PDF.