https://pixelotes.com/tags/threat-hunting/Recent content in threat-hunting on Raúl PastorHugoenMon, 02 Nov 2026 00:00:00 +0000https://pixelotes.com/blog/supply-chain-security/Mon, 02 Nov 2026 00:00:00 +0000https://pixelotes.com/blog/supply-chain-security/<p>Most teams have a patching process for servers and laptops. Far fewer have one for the code they did not write: npm packages, Python libraries, container base images, IDE extensions. We add a dependency once, it works, and nobody looks at it again.</p> <p>That is the gap attackers are using. You do not need to breach a company if you can get your code into something the company already trusts and installs automatically.</p>