Tag archive
All visible posts matching this normalized tag.
Jul 13, 2026
5 itemsFive high-signal cyber developments from July 11-13, 2026: Joomla zero-days in CISA KEV, exposed Evilginx ops, a jscrambler npm infostealer, Pakistan police portal espionage, and unpatched AI-infra flaws.
Jul 12, 2026
5 itemsJuly 11 roundup: Progress ShareFile emergency shutdown, U-Boot FIT signature flaws, Ghostcommit AI code-review attack, ACSC CMS exploitation alert, and RedHook Android RAT.
NEWS
The jscrambler npm package was compromised; installing 8.14.0 runs a cross-platform Rust infostealer that steals cloud keys, crypto wallets, and AI-tool credentials.
Jul 11, 2026
5 itemsJuly 10, 2026 roundup: AI-driven patch pressure, a 200+ GitHub malware network, active Django SQLi, HalluSquatting, and a malicious Injective npm SDK.
NEWS
Socket tracks 'Operation Muck and Load', a 222-repo GitHub lure network that uses a fake Go module to drop RATs, infostealers, and cryptominers.
Jul 10, 2026
5 itemsJuly 9 roundup covering Defender patching, Helix SharePoint extortion, proxy malware, npm hardening, and open-source sabotage risk.
NEWS
npm 12 now blocks dependency install scripts, Git dependencies, and remote tarballs by default while GitHub phases out high-risk 2FA-bypass token operations.
NEWS
Fresh research shows malicious AI agent skills can evade static scanners, pushing defenders toward runtime sandboxing and stricter skill governance.
NEWS
Fresh reporting ties Anubis, The Gentlemen, and TeamPCP activity to edge-device access, EDR-killing drivers, and supply-chain credential theft.
Jul 02, 2026
5 itemsSource-backed July 1 digest covering active exploitation, critical enterprise patching, AI/browser attack research, and fake-PoC supply-chain abuse.
NEWS
Microsoft temporarily disabled repositories after reports of Miasma worm activity targeting developer IDE and AI coding tool workflows.
RESEARCH
Cross-source reporting on TeamPCP shows how compromised scanners, package pipelines, and marketplace plugins turn trusted developer tools into credential-harvesting infrastructure.
Jun 27, 2026
3 itemsThree high-signal cybersecurity stories: an AI coding-assistant flaw, a major supply-chain breach, and an industrial-control advisory that broaden defender exposure.
NEWS
CISA, GitHub, and Nx describe a May 2026 supply-chain compromise that reached developer tooling, repository access, and secret rotation.
NEWS
StepSecurity, SafeDep, and The Hacker News describe a Miasma supply chain incident that led GitHub to disable 73 Microsoft repositories after malicious AI-tool and IDE startup hooks were planted.