Supply-Chain Attacks, TP-Link devices & a pair of socks

An attacker building residential proxy networks from compromised TP-Link and ASUS routers was also responsible for a sophisticated supply-chain attack against a security vendor’s CI/CD pipeline, revealing a previously unreported link between IoT exploitation and software supply-chain compromise.