securityweek.com resources

securityweek.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-08-28.

RCE 36 Supply Chain 32 AI 3 SQLi 3 GraphQL 2 Mobile 2 SSRF 2 XSS 1 XXE 1

Date Added	Resource	Excerpt
2026-08-28 2026	In Other News: Log4j RCE Scare Minimus Shutdown Iranian Hacker Sanctions RCE	Survey of recent cybersecurity incidents, detailing the Log4j RCE vulnerability's downplayed impact, LockBit's ransomware claims against U.S. Bank, Minimus's shutdown and acquisition by Echo, Truffle Security and Intruder's credential leak findings, Zimperium's research on mobile banking malware and AI usage, Troy Hunt's analysis of the Carhartt breach data's synthetic nature, Akira ransomware's attack on Paylogix, leaked Bauman University records on Russian cyber training, the Manchester Airports Group cyberattack, and US sanctions against Iranian hackers tied to MOIS.
2026-08-26 2026	CISA Warns of Exploited Gitea Vulnerability RCE	Writeup on CVE-2026-60004, a critical code injection vulnerability in Gitea that allows an attacker with repository write access to execute shell commands as the Gitea service account by sending a malicious patch to the diffpatch API endpoint. This vulnerability, patched in Gitea version 1.27.1, has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog, and federal agencies were mandated to patch it by August 28. This exploitation follows previous warnings about another Gitea flaw, CVE-2026-20896, which has not yet been added to the KEV catalog.
2026-08-21 2026	Microsoft Rolls Out 22 Fresh Security Patches RCE	Updates from Microsoft address 22 security vulnerabilities, including a critical Entra ID zero-day (CVE-2026-69836) exploited for remote code execution. Other critical flaws patched include elevation-of-privilege bugs in Azure SQL Database (CVE-2026-69502, CVE-2026-68782, CVE-2026-68789, CVE-2026-66309), Azure Arc (CVE-2026-69555, CVE-2026-65816), and Exchange Online (CVE-2026-65801), along with RCE in Azure Managed Instance for Apache Cassandra (CVE-2026-65770). Additionally, Microsoft patched ShieldBreak (CVE-2026-69414), a Defender elevation-of-privilege vulnerability.
2026-08-21 2026	Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini AI	Writeup on Cryptographic Context Injection, an attack technique discovered by Adversa AI that bypasses AI safety guardrails in models like Grok and Gemini by embedding malicious instructions within encrypted payloads. This method circumvents prompt classification by allowing the model to decrypt and execute harmful plaintext within its sandbox, potentially leading to data exfiltration or the generation of restricted content, as demonstrated in examples targeting Grok's agentic framework and Gemini's direct injection capabilities.
2026-08-21 2026	Critical Isolated-vm Vulnerability Leads to RCE on Host RCE	Library advisory detailing a critical type confusion vulnerability in `isolated-vm`'s `ExternalCopy` function. This bug, a TOCTOU weakness in data transfer between JavaScript Isolates, allows attackers to hijack control flow and achieve RCE on the host system. Patches are available in `isolated-vm` versions 6.2.0 and 7.0.1.
2026-08-21 2026	Rust Supply Chain Attack Linked to North Korean Hackers Supply Chain	Library targeting the Rust supply chain ecosystem, highlighting the August 20th attack involving the popular `arrayref` crate. This incident saw malicious versions of `arrayref`, `internment`, and `append-only-vec` published to crates.io, impersonating the legitimate `proc-macro2` package via a poisoned `build.rs` script. The attack is attributed to North Korean threat actor Sapphire Sleet, with infrastructure overlaps noted with previous Axios and Mastra campaigns.
2026-08-19 2026	CISA Urges Immediate Patching of Exploited Microsoft VMware Apple Vulnerabilities RCE	Reference of CISA's urging for immediate patching of four actively exploited vulnerabilities affecting Microsoft, VMware, and Apple products. This includes CVE-2026-33824 (Windows IKE double free), CVE-2026-55040 (SharePoint weak authentication), CVE-2026-59310 (VMware vCenter code execution), and CVE-2026-65400 (macOS Screen Sharing authentication bypass). Exploitation of these flaws has been observed in autonomous hacking campaigns, manual targeting, and for deploying malware like Monero miners.
2026-08-18 2026	300000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw RCE	Writeup of CVE-2026-15748 in Forminator Forms, a critical arbitrary file upload vulnerability impacting over 300,000 WordPress sites. This flaw, with a CVSS score of 9.8, allows unauthenticated attackers to achieve remote code execution by bypassing file type validation in the `handle_file_upload` function and leveraging custom file upload storage configurations. The vulnerability affects versions up to 1.56.1 and was patched in 1.56.2.
2026-08-18 2026	GitLab Patches Critical Code Injection Vulnerability GraphQL	Library patches address CVE-2026-19478, a critical code injection vulnerability allowing unauthenticated attackers to modify or delete data via GraphQL directives, and CVE-2026-19650, a CSRF flaw in the GraphQL multiplex query handler. These vulnerabilities impact GitLab CE/EE versions 18.2, 19.0, 19.1, and 19.2 and onwards, with fixes available in specific patched versions.
2026-08-13 2026	Critical VMware vCenter Vulnerability in Attackers Crosshairs RCE	Writeup detailing the exploitation of CVE-2026-59310, a critical directory traversal vulnerability in VMware vCenter's Syslog server, which enables remote code execution. Threat actors, including an APT group, are actively targeting vulnerable vCenter instances, using a reverse shell framework called `reverse_ssh` for persistent access. Quirso has developed a YARA rule to help detect `reverse_ssh` artifacts, recommending validation through checks for unauthorized installations and unexpected outbound connections.
2026-08-11 2026	Zoom Patches Zero-Click Code Execution Vulnerability RCE	Writeup of Zoomsday (CVE-2026-53413), a zero-click RCE vulnerability in Zoom's annotator function. A Security discovered that a missing bound check allowed specially crafted messages sent over Zoom's proprietary annotator protocol to corrupt memory, leading to code execution on other meeting participants' machines. The exploit enables attackers to gain control of a victim's machine without any user interaction or visual indication. Patches are available in Zoom clients and SDK versions 7.1.5 and 7.0.6 for affected platforms.
2026-08-06 2026	Critical Paperclip Flaw Allowed Admin Access Code Execution RCE	Writeup on CVE-2026-41679, a critical authorization bypass in the Paperclip AI management platform. This vulnerability, with a CVSS score of 10, allowed unauthenticated remote attackers to gain arbitrary code execution with server permissions. Exploitation involved self-registering an account, approving a CLI challenge, and then importing a crafted YAML file to deploy an agent that executes commands as the Paperclip server process. The flaw was patched by implementing authorization checks in import flows and tightening company scoping.
2026-07-28 2026	New GitHub PyPI Policies Boost Supply Chain Security Supply Chain	Policies implemented by GitHub and PyPI aim to strengthen software supply chain security. GitHub's Dependabot now incorporates a three-day cooldown for non-security version bumps, delaying pull requests to allow for detection of malicious packages. PyPI is preventing the poisoning of older releases by blocking uploads to packages older than 14 days, protecting against compromised publishing tokens and reducing cleanup efforts in case of an attack.
2026-07-24 2026	Trump Orders Defense Contractors to Map Software Suppliers Across Critical Supply Chains Supply Chain	Executive Order mandates defense contractors meticulously map critical supply chains, including software and technology, to national security systems, extending beyond traditional SBOMs to trace origins from raw materials. This requires proactive supplier vetting, identification and reporting of significant risks to the Department of War within 15 days, and mitigation plans. The order anticipates the government using AI for supply chain analysis, potentially creating new security targets and expanding cybersecurity and third-party risk team responsibilities.
2026-07-20 2026	WP2Shell WordPress Vulnerabilities Exploited in the Wild RCE	Writeup on WP2Shell, two severe WordPress vulnerabilities (CVE-2026-60137 and CVE-2026-63030) actively exploited in the wild. These flaws, affecting versions 6.9.0-6.9.4 and 7.0.0-7.0.1, allow unauthenticated attackers to achieve remote code execution by chaining an SQL injection with arbitrary code execution. Patches have been released, and forced auto-updates are enabled for affected sites, with Cloudflare also providing protective rules.
2026-07-12 2026	Ghost Accounts Abuse GitHub API in Mass Recon Campaign GraphQL	Analysis of ghost account abuse of the GitHub API reveals mass reconnaissance campaigns leveraging dormant accounts and leaked credentials. Threat actors exploit unauthenticated API endpoints, including REST and GraphQL, to enumerate organizations, repositories, and users. While primarily focused on reconnaissance, some campaigns escalated to cloning repositories and exfiltrating data, sometimes using inadvertently exposed tokens. Detection strategies involve monitoring for data exfiltration from private repositories, anomalous user agent behavior, and establishing baselines for normal GitHub activity.
2026-07-11 2026	HalluSquatting Turns AI Hallucinations Into Botnet Delivery Mechanism AI	Technique detailing HalluSquatting, an attack that leverages AI hallucinations to deliver botnets at scale. This untargeted promptware method exploits AI applications by pre-registering fake repository or package names that LLMs commonly invent. When users ask AI tools like Cursor, GitHub Copilot, or Gemini CLI to fetch resources, the AI may hallucinate a squatted name, download malicious instructions, and execute them via the built-in terminal, leading to the deployment of malware and the creation of agentic botnets.
2026-07-03 2026	Critical Cursor AI IDE Flaws Could Lead to OS-Level Remote Code Execution RCE	Writeup detailing CVE-2026-50548 and CVE-2026-50549, dubbed DuneSlide, which allow OS-level remote code execution in the Cursor AI IDE. These flaws leverage unchecked terminal command execution and symbolic link vulnerabilities to bypass sandbox restrictions, enabling attackers to overwrite critical executables or write to arbitrary locations by manipulating path resolution logic when processing user prompts. Patches are available in Cursor 3.0.
2026-06-30 2026	Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks Supply Chain	Library that prevents GuardFall vulnerabilities where Bash shell tricks, such as quote removal and $IFS spacing, are used to inject malicious instructions into AI coding agents. The research tested eleven popular open-source agents, including Hermes and Roo-code, finding that most are susceptible to these decades-old Bash techniques, which can lead to supply chain attacks like AWS credential exfiltration or deletion of development environments, particularly in CI pipelines. Only the Continue agent successfully blocked all tested bypass cases.
2026-06-24 2026	Exclusive: Meet AIVEX a New Triage Model Built to Reduce Supply Chain Threat and Risk Supply Chain	Library extension AIVEX, an addition to CycloneDX VEX, transforms context-rich data from a safety relevance interpretation layer (SRIL) into a machine-readable format. SRIL enriches vulnerability data with four dimensions: safety domain classification, lifecycle stage mapping, consequence severity modification, and exploitability in context. This combination addresses the inadequacy of traditional SBOMs, VEX, and CVSS scores for triaging vulnerabilities in AI-driven systems, particularly those controlling physical robots, by providing crucial operational context to risk assessments.
2026-06-24 2026	FFmpeg PixelSmash Flaw Allows RCE on Video Players Media Servers NAS Appliances RCE	Library for detecting and mitigating CVE-2026-8461, a critical heap out-of-bounds write vulnerability dubbed PixelSmash within FFmpeg's MagicYUV decoder. This flaw, present in numerous video players, media servers, and NAS appliances, enables attackers to achieve remote code execution (RCE) by delivering a crafted media file, potentially leading to zero-click attacks. The library aids in identifying vulnerable FFmpeg builds and understanding the exploit vector, which involves targeting the AVBuffer struct to inject shell commands before the inevitable process crash.
2026-06-16 2026	Atomic Arch Supply Chain Attack Hits 1500 AUR Packages Supply Chain	Writeup detailing the Atomic Arch supply chain attack targeting Arch Linux's User Repository (AUR), which compromised over 1,500 packages by modifying build scripts (PKGBUILDs) to execute malicious NPM and Bun-based installations. The attack leveraged abandoned packages, introduced rootkit-like malware for credential harvesting and exfiltration, and utilized eBPF for persistence, making detection and cleanup difficult.
2026-06-13 2026	NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks Supply Chain	Library update detailing changes in NPM version 12, set for July release, to mitigate supply chain attacks like TeamPCP and Shai-Hulud. This update will block automatic execution of preinstall, install, and postinstall scripts from dependencies by default. Developers can proactively manage script execution by using `npm approve-scripts` to create an allowlist for trusted packages, preventing vulnerabilities exploited through weaponized binding.gyp files and Git/remote URL dependencies.
2026-06-11 2026	Hackers Exploit Langflow Vulnerability for Remote Code Execution RCE	Writeup of CVE-2026-5027, a path traversal vulnerability in Langflow, allowing unauthenticated remote code execution. Exploitation involves sending a request to the `/api/v2/files` endpoint without sanitizing the `filename` parameter, enabling attackers to write files to arbitrary locations and achieve RCE. The flaw is particularly dangerous due to Langflow's default unauthenticated auto-login feature. This highlights a trend of attackers targeting AI development tooling.
2026-06-07 2026	Mirasvit Vulnerability Exploited to Execute Code on Magento Servers RCE	Writeup of CVE-2026-45247, a critical PHP object injection vulnerability in Mirasvit's Full Page Cache Warmer for Magento 2, allowing unauthenticated remote code execution. Exploitation occurs via crafted serialized PHP objects in the CacheWarmer cookie, leading to arbitrary code execution on Magento and Adobe Commerce servers. Organizations using versions prior to 1.11.12 are vulnerable, and detection indicators include CacheWarmer cookie values starting with specific base64 strings.
2026-06-05 2026	VS Code Vulnerability Allows One-Click GitHub Token Theft RCE	Writeup details a VS Code vulnerability allowing one-click GitHub token theft via specially crafted Jupyter notebooks on github.dev. Exploiting this zero-day involves hidden code simulating keystrokes to install a malicious extension, which then exfiltrates the user's GitHub access token. This grants attackers read/write access to repositories, including private ones. The vulnerability also affects the desktop version of VS Code, potentially leading to remote code execution, though it appears unpatched there.
2026-06-03 2026	Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk RCE	Library detailing a critical vulnerability in six Microsoft Android apps, including Word and Excel, where a single debug flag, `setIsDebugMode(true)`, left in production code allowed untrusted apps to intercept Microsoft account access tokens. This flaw, affecting billions of downloads and assigned CVE-2026-41100, -41101, and -41102, enabled potential supply chain attacks by granting attackers access to sensitive data like emails and documents. The issue was identified by Enclave and has since been patched by Microsoft.
2026-06-03 2026	Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches RCE	Writeup of CVE-2026-0826, a critical stack-based buffer overflow in HP Poly Voice VoIP phones impacting models like the VVX 150-450 and Trio 8800-8300 series. The vulnerability, exploitable via crafted SIP INVITE requests with malicious Session Description Protocol attributes when Interactive Connectivity Establishment (ICE) is enabled, allows for remote code execution with root privileges by leveraging Return Oriented Programming chains to bypass ASLR and NX mitigations. Disabling ICE or updating firmware mitigates the risk.
2026-06-02 2026	Supply Chain Attack Hits 32 Red Hat NPM Packages Supply Chain	Analysis of a supply chain attack on 32 Red Hat NPM packages details a credential-stealing worm that exploited compromised CI/CD pipelines via GitHub Actions OIDC. The malicious preinstall hook executed during NPM install, harvesting sensitive data like GitHub secrets, npm tokens, and cloud credentials, similar to the Mini Shai-Hulud worm. Attackers exfiltrated data to attacker-controlled servers or GitHub repositories, with initial findings indicating at least 210 repositories may contain stolen credentials. Red Hat has since released clean versions of the affected packages.
2026-06-02 2026	Critical Windows Netlogon Vulnerability in Attackers Crosshairs RCE	Writeup of CVE-2026-41089, a critical Windows Netlogon vulnerability, details its exploitation for remote code execution by threat actors. This stack-based buffer overflow flaw allows unauthenticated attackers to target domain controllers, potentially gaining system privileges. The Centre for Cybersecurity Belgium warns of active in-the-wild exploitation, urging immediate patching despite Microsoft's initial assessment. This vulnerability poses a significant risk due to Netlogon's role in domain authentication.
2026-05-28 2026	New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails Supply Chain	Platform for detecting AI coding agent drift and malicious behavior, Edamame monitors workstation posture, hardens environments, and integrates with agents like Cursor and Claude. Its divergence and attack-pattern detection engines analyze telemetry for credential exfiltration, token theft, and sandbox exploitation, providing runtime verification for coding agent workloads and identifying supply-chain attacks.
2026-05-26 2026	Ghost CMS Vulnerability Exploited to Hack Over 700 Websites SQLi	Writeup of CVE-2026-26980, an SQL injection vulnerability in Ghost CMS, details how threat actors exploited it for mass attacks. Unauthenticated attackers can extract sensitive data, including authentication tokens and user credentials. The vulnerability was leveraged to obtain Admin API Keys, allowing malicious JavaScript loaders for ClickFix attacks to be injected into articles. Over 700 websites, including those of DuckDuckGo, Harvard University, and Oxford University, were compromised by at least two active threat groups.
2026-05-25 2026	Over 5500 GitHub Repositories Infected in Megalodon Supply Chain Attack Supply Chain	Writeup on the Megalodon supply chain attack, which infected over 5,500 GitHub repositories. The campaign leveraged malicious GitHub Actions workflows to steal credentials, keys, and tokens. Attackers injected over 5,700 commits within a six-hour window, deploying payloads to exfiltrate sensitive information like AWS, GCP, and Azure credentials, as well as SSH keys. The attack was discovered following the identification of compromised Tiledesk NPM packages.
2026-05-19 2026	Unpatched ChromaDB Vulnerability Can Lead to Server Takeover RCE	Writeup of CVE-2026-45829, dubbed ChromaToast, a pre-authentication RCE vulnerability in ChromaDB. This flaw allows unauthenticated attackers to execute arbitrary code, gain shell access, and compromise sensitive data, including API keys and secrets. Exploitation involves tricking the server into downloading and executing a malicious HuggingFace model before authentication. The vulnerability affects ChromaDB versions since 1.0.0, with an estimated 73% of internet-accessible deployments exposed. HiddenLayer and researcher Azraelxuemo have reported the issue without response from Chroma.
2026-05-19 2026	PoC Code Published for Critical NGINX Vulnerability RCE	Writeup detailing CVE-2026-42945, a critical heap buffer overflow in NGINX's `ngx_http_rewrite_module` that can lead to denial-of-service or remote code execution. The vulnerability arises from a two-pass script engine process where an undersized buffer is allocated due to an unpropagated flag when a rewrite replacement contains a question mark. Exploitation involves manipulating request URIs with escapable characters to control the overflow size and employing cross-request heap feng shui to corrupt cleanup pointers for RCE. Patched versions include NGINX Plus 37.0.0 and NGINX open source 1.31.0.
2026-05-18 2026	First Shai-Hulud Worm Clones Emerge Supply Chain	Writeup detailing the emergence of Shai-Hulud worm clones following the release of its source code. The malware, previously used in supply chain attacks against NPM packages affecting developers, was adapted by threat actors and published in new NPM packages like 'chalk-tempalte'. These clones aim to steal credentials and API keys, propagating by injecting themselves into victim packages and publishing malicious versions, impacting users of Trivy, Bitwarden, Checkmarx, SAP, and TanStack.
2026-05-15 2026	OpenAI Hit by TanStack Supply Chain Attack Supply Chain	Writeup of the TanStack supply chain attack, detailing how the TeamPCP group compromised 42 packages and over 170 namespaces across NPM and PyPI. This coordinated campaign infected developer devices with the Shai-Hulud worm, leading to exfiltration of credential material from OpenAI's internal source code repositories via two employee devices. OpenAI responded by rotating credentials, revoking sessions, restricting workflows, and revoking/re-signing code-signing certificates for multiple platforms.
2026-05-13 2026	Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises RCE	Vulnerability writeup of CVE-2026-40361, a critical zero-click use-after-free bug in Microsoft Outlook and Word, allowing remote code execution via email previews. Discovered by Haifei Li, developer of Expmon, this flaw, similar to the decade-old BadWinmail (CVE-2015-6172), bypasses enterprise firewalls and targets users by exploiting Outlook's email rendering engine, making plain-text rendering a potential mitigation. Microsoft rates exploitation as "more likely."
2026-05-13 2026	Fortinet Ivanti Patch Critical Vulnerabilities RCE	Advisories detail critical vulnerabilities patched by Fortinet and Ivanti. Fortinet addressed CVE-2026-44277 and CVE-2026-26083, both CVSS 9.1 critical code execution flaws in FortiAuthenticator and FortiSandbox respectively, alongside CVE-2025-53844, a high-severity out-of-bounds write in FortiOS. Ivanti's patches include CVE-2026-8043, a critical CVSS 9.6 file write vulnerability in Xtraction, plus high-severity SQL injection and OS command injection flaws in Endpoint Manager and Virtual Traffic Manager.
2026-05-12 2026	SailPoint Discloses GitHub Repository Hack Supply Chain	Writeup of SailPoint's GitHub repository hack, occurring April 20th, resulted from a third-party application vulnerability. SailPoint contained the incident swiftly, with a cybersecurity firm's investigation finding no evidence of production or staging data compromise or service interruption. Affected customers in the accessed repositories were notified, with no further action currently required. The specific vulnerability and threat actor remain undisclosed, with no confirmed link to TeamPCP.
2026-05-12 2026	TanStack Mistral AI UiPath Hit in Fresh Supply Chain Attack Supply Chain	Library that authors of the Mini Shai-Hulud supply chain attack compromised to steal developer credentials, API keys, and secrets. The attack targeted over 170 packages across NPM and PyPI, including TanStack, Mistral AI, and UiPath. Attackers exploited vulnerabilities in GitHub Actions OIDC tokens and cache poisoning to publish malicious packages with forged SLSA provenance, making them appear legitimate. The malware harvested sensitive data through multiple exfiltration channels, including a decentralized Session network.
2026-05-11 2026	Build Application Firewalls Aim to Stop the Next Supply Chain Attack Supply Chain	Library from InvisiRisk, a build application firewall (BAF), enforces policy during the CI/CD build process by inspecting package activity rather than solely scanning code. This approach aims to prevent supply chain attacks, such as those involving the SolarWinds breach or hijacked npm libraries like Axios, by detecting unexpected or malicious actions within the build environment. The BAF, along with InvisiRisk's TruSBOM tool, provides detailed explanations for risky actions and generates accurate SBOMs by directly observing the software build process, offering a robust defense against evolving threats.
2026-05-11 2026	Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Supply Chain	Plugin version 2.0.13-829.vc72453fa_1c16 of the Checkmarx Jenkins AST plugin is the secure version, after a malicious iteration was published to the Jenkins Marketplace. This compromise, attributed to the TeamPCP hacker gang and potentially the Lapsus$ extortion group, stems from a wider supply chain attack impacting Checkmarx's repositories since March, following a Trivy supply chain incident.
2026-05-07 2026	Vendor Says Daemon Tools Supply Chain Attack Contained Supply Chain	Analysis of the Daemon Tools supply chain attack details how threat actors injected trojanized versions of Daemon Tools Lite (specifically version 12.5.1) released between April 8 and May 5 with code to collect information and deploy backdoors. Disc Soft has since contained the incident, removed compromised files, and released a clean version (12.6.0.2445), advising users to uninstall the affected software and scan their systems.
2026-05-07 2026	Gemini CLI Vulnerability Could Have Led to Code Execution Supply Chain Attack Supply Chain	Vulnerability analysis of Gemini CLI identified a critical flaw (CVSS 10/10) that could enable supply chain attacks. Exploiting indirect prompts in GitHub issues, attackers could bypass tool allowlists in –yolo mode, leading to arbitrary command execution. This allows for the extraction of secrets, gaining write access to repositories, and pushing malicious code to downstream users. The issue, affecting multiple Google repositories and also impacting headless mode via lax trust, was patched in Gemini CLI version 0.39.1.
2026-05-06 2026	Sophisticated Quasar Linux RAT Targets Software Developers Supply Chain	Analysis of Quasar Linux (QLNX), a sophisticated backdoor targeting software developers. QLNX employs a modular architecture with rootkit capabilities, detection evasion, and multiple persistence methods including crontab, desktop entries, init scripts, service files, and shell lines. It focuses on stealing developer credentials for AWS, Kubernetes, Docker Hub, Git, NPM, and PyPI, enabling attackers to compromise publishing pipelines and pivot to cloud environments. The RAT uses a PAM backdoor and an eBPF rootkit to conceal its presence at both userspace and kernel levels, while supporting 58 commands for comprehensive system control and information harvesting.
2026-05-06 2026	Government Scientific Entities Hit via Daemon Tools Supply Chain Attack Supply Chain	Library containing injected code in Daemon Tools versions 12.5.0.2421 through 12.5.0.2434 has been identified as part of a supply chain attack affecting government, scientific, and other organizations. The compromised binaries, including DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe, activate a backdoor that fetches and executes payloads, with targeted deployments of information collectors and the QUIC RAT observed.
2026-05-05 2026	Critical Remote Code Execution Vulnerability Patched in Android Mobile RCE	Library addressing CVE-2026-0073, a critical Android System vulnerability enabling unauthenticated remote code execution via the Android Debug Bridge daemon. Exploitation does not require user interaction. This critical flaw, impacting the 'adbd' process, allows attackers to execute code as the shell user without further privileges. While no exploits in the wild have been reported for this specific CVE, other Android vulnerabilities like CVE-2024-43093 and CVE-2025-38352 were exploited previously.
2026-05-05 2026	Critical High-Severity Vulnerabilities Patched in Apache MINA HTTP Server RCE	Library updates for Apache MINA and HTTP Server address critical and high-severity vulnerabilities. Apache MINA 2.2.7 and 2.1.12 fix CVE-2026-42778, an incomplete fix for insecure deserialization and RCE, and CVE-2026-42779, an incomplete fix for allowlist bypass and code execution. Apache HTTP Server 2.4.67 resolves CVE-2026-23918 (double-free, RCE), CVE-2026-28780 (heap buffer overflow, RCE), and other issues including CRLF sequence manipulation (CVE-2026-33523) and digest authentication bypass (CVE-2026-33006).
2026-05-05 2026	MetInfo Weaver E-cology Vulnerabilities in Attackers Crosshairs RCE	Writeup detailing exploitation of CVE-2026-29014 in MetInfo CMS and CVE-2026-22679 in Weaver E-cology. Both vulnerabilities allow unauthenticated remote code execution (RCE). MetInfo's flaw is a PHP code injection, while Weaver E-cology's stems from exposed debug functionality, enabling attackers to execute arbitrary commands via crafted POST requests and use the debug endpoint as a direct shell for discovery and payload delivery.
2026-05-01 2026	1800 Hit in Mini Shai-Hulud Attack on SAP Lightning Intercom Supply Chain	Writeup of the Mini Shai-Hulud supply chain attack, impacting over 1,800 developers across PyPi, NPM, and PHP ecosystems. TeamPCP's campaign injected malicious versions of SAP NPM packages, the Lightning PyPi package, and the intercom-client NPM package with information-stealing malware. The payload, disguised with the description "A Mini Shai-Hulud has Appeared," exfiltrates credentials, keys, and tokens, targeting Kubernetes environments and HashiCorp Vault secrets, utilizing GitHub commits for C&C commands.
2026-04-30 2026	SAP NPM Packages Targeted in Supply Chain Attack Supply Chain	Library of compromised SAP NPM packages, including npm mbt 1.2.48, npm @cap-js/db-service 2.10.1, npm @cap-js/postgres 2.2.2, and npm @cap-js/sqlite 2.2.2, were found to contain malicious code as part of the Mini Shai-Hulud supply chain attack. The injected preinstall script acted as a bootstrapper, fetching and executing a Bun binary that stole local credentials, GitHub/NPM tokens, and cloud secrets. The malware exfiltrated data to GitHub repositories with a specific description and included a propagation mechanism, targeting SAP CAP and Business Technology Platform workflows. The incident is attributed to TeamPCP, leveraging a shared RSA public key for encryption.
2026-04-30 2026	Critical Gemini CLI Flaw Enabled Host Code Execution Supply Chain Attacks RCE Supply Chain	Writeup of the critical Gemini CLI vulnerability (CVE-2024-XXXX, unassigned) discovered by Novee Security, which allowed for host code execution through untrusted agent configurations loaded from workspaces. Attackers could exploit this to steal secrets, gain lateral movement, and conduct supply chain attacks within CI/CD pipelines, bypassing prompt injection. This is distinct from prior research demonstrating hijacking of AI agents like Claude Code Security Review and GitHub Copilot Agent via malicious GitHub comments.
2026-04-29 2026	Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure AI SQLi	Library for securing AI gateways; a critical-severity SQL injection vulnerability (CVE-2026-42208, CVSS 9.3) in LiteLLM allowed unauthenticated attackers to exfiltrate database credentials and API keys by exploiting the proxy API key verification process. Attacks were observed shortly after disclosure, targeting database tables containing sensitive information. LiteLLM version 1.83.7 resolves this by properly parameterizing database queries.
2026-04-29 2026	38 Vulnerabilities Found in OpenEMR Medical Software Mobile SQLi	Analysis of OpenEMR reveals 38 CVE-assigned vulnerabilities, including critical SQL injection flaws (CVE-2026-24908, CVE-2026-23627) allowing database compromise and PHI exfiltration, and an authorization bypass (CVE-2026-24487) exposing patient data. These issues, primarily stemming from authorization flaws, were identified by Aisle and have since been patched by OpenEMR developers.
2026-04-29 2026	Checkmarx Confirms Data Stolen in Supply Chain Attack Supply Chain	Analysis of a supply chain attack targeting Checkmarx's KICS open source project, involving the Trivy supply chain compromise and attributed to TeamPCP. Attackers leveraged hijacked GitHub Action version tags, poisoned OpenVSX plugins, and two GitHub Actions workflows. Subsequently, Lapsus$ also joined in, claiming theft of source code, employee databases, API keys, and credentials, further poisoning a DockerHub KICS image, a GitHub action, and VS Code/Developer Assist extensions, impacting the Bitwarden CLI.
2026-04-29 2026	Critical GitHub Vulnerability Exposed Millions of Repositories RCE Supply Chain	Writeup of CVE-2026-3854, a critical remote code execution flaw in GitHub's internal Git infrastructure. This injection vulnerability allowed authenticated users to execute arbitrary commands on backend servers via a simple `git push` command, potentially compromising millions of repositories on GitHub Enterprise Server and GitHub.com. Wiz researchers discovered the issue, which affected various GitHub Enterprise offerings, and a patch was subsequently released.
2026-04-28 2026	Dozens of Open VSX Extension Clones Linked to GlassWorm Malware Supply Chain	Analysis of 73 cloned extensions on the Open VSX marketplace reveals a sophisticated GlassWorm malware campaign. These extensions, masquerading as legitimate tools, employ social engineering and Unicode obfuscation to evade detection, stealing GitHub, Git, NPM credentials, and cryptocurrency. The malware's delivery mechanism involves bundled native binaries and remote payload retrieval, a tactic designed to bypass static analysis and compromise users through normal extension updates.
2026-04-24 2026	Bitwarden NPM Package Hit in Supply Chain Attack Supply Chain	Writeup detailing the compromise of the Bitwarden CLI NPM package, version 2026.4.0, in a supply chain attack. The malicious package contained code to exfiltrate secrets and tokens from Azure, AWS, GitHub, GCP, and NPM, and weaponized GitHub tokens to abuse GitHub Actions. This incident shares similarities with previous attacks on Checkmarx, including payload structure and credential harvesting methods, and shows potential links to the Shai-Hulud worm campaigns.
2026-04-22 2026	Critical Apache Tika Vulnerability Leads to XXE Injection XXE	Writeup of CVE-2025-66516, a critical XXE injection vulnerability in Apache Tika, affecting tika-core, tika-pdf-module, and tika-parsers. Attackers can exploit this flaw via crafted XFA files within PDFs, potentially leading to information leaks, SSRF, DoS, or RCE. This issue expands the scope of a previous vulnerability, CVE-2025-54988. Patches are available in tika-core 3.2.2, tika-parser-pdf-module 3.2.2, and tika-parsers 2.0.0.
2026-04-22 2026	Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data Supply Chain	Analysis of SBOM failures reveals that while Software Bills of Materials and Vulnerability Exploitability eXchange statements offer data, security teams lack decision clarity. Supply chain attacks, including those leveraging Trivy and Axios, persist due to inconsistent interpretation of SBOM/VEX data, lack of updated SBOM delivery, and hesitations in exploitability assertions. Researcher Devashri Datta advocates for a unified, governance-driven intelligence layer to interpret SBOMs as lifecycle signals and VEX as contextual input, enabling explainable and defensible decisions amidst increasing regulatory pressure and rapid exploitation times.
2026-04-22 2026	Google Antigravity in Crosshairs of Security Researchers Cybercriminals RCE	Writeup on Google Antigravity vulnerabilities, detailing a sandbox escape flaw allowing arbitrary code execution through insufficient input sanitization during file search operations, which bypasses Secure Mode and can be triggered via indirect prompt injection. Additionally, researchers discovered a fake website distributing a trojanized installer that deploys stealer malware, targeting browser data, cryptocurrency wallets, and employing techniques like clipboard hijacking, keystroke logging, and hidden desktop tradecraft.
2026-04-16 2026	Splunk Enterprise Update Patches Code Execution Vulnerability RCE	Update for Splunk Enterprise addresses CVE-2026-20204, a high-severity flaw allowing low-privileged users to achieve remote code execution via temporary file handling issues. It also patches medium-severity vulnerabilities in Splunk Enterprise and Cloud Platform related to username formatting and Data Model Acceleration control. Additionally, CVE-2026-20205 in MCP Server, a high-severity vulnerability allowing authenticated attackers to view clear-text user sessions and tokens, is fixed in MCP Server app version 1.0.3. Patches for third-party packages across various Splunk products are also included.
2026-04-15 2026	Fortinet Patches Critical FortiSandbox Vulnerabilities RCE	Library advisories detail critical vulnerabilities patched by Fortinet, including CVE-2026-39813 for FortiSandbox JRPC API authentication bypass and CVE-2026-39808 for FortiSandbox OS command injection, both exploitable via HTTP requests without authentication. Additionally, CVE-2026-22828, a high-severity buffer overflow in FortiAnalyzer Cloud, was patched, alongside SQL injection bugs in FortiDDoS-F and FortiClientEMS, and various medium- and low-severity issues across other Fortinet products.
2026-04-13 2026	OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack Supply Chain	Writeup detailing the Axios supply chain attack, where malicious NPM packages of the popular JavaScript HTTP client were distributed by North Korea-linked hackers. OpenAI was impacted, with a GitHub Actions workflow for macOS app-signing inadvertently downloading and executing a compromised Axios version. While OpenAI believes its macOS signing certificate was not compromised, they are revoking and rotating it as a precaution against potential code signing abuses. Evidence suggests widespread impact, with malicious versions seen in multiple environments.
2026-04-10 2026	Orthanc DICOM Vulnerabilities Lead to Crashes RCE RCE	Library of nine vulnerabilities, CVE-2026-5437 to CVE-2026-5445, impacting the Orthanc DICOM server, allowing for server crashes, data leaks, and remote code execution. These defects stem from insufficient metadata validation, missing checks, and unsafe arithmetic, manifesting as out-of-bounds reads, GZIP and ZIP decompression bombs, HTTP server memory exhaustion, and heap buffer overflows in image parsing and decoding logic. Versions 1.12.10 and earlier are affected; update to 1.12.11 for remediation.
2026-04-10 2026	Critical Marimo Flaw Exploited Hours After Public Disclosure RCE	Writeup detailing the rapid exploitation of CVE-2026-39987, a critical unauthenticated RCE vulnerability in the Marimo reactive notebook. The flaw, discovered in the terminal WebSocket endpoint due to a lack of authentication validation, allowed attackers to gain an interactive shell and execute arbitrary commands. Exploitation began within nine hours of public disclosure, with attackers quickly moving to exfiltrate credentials and search for sensitive files like SSH keys. Releases up to Marimo 0.20.4 are affected, and users are urged to update to version 0.23.0 or newer.
2026-04-08 2026	RCE Bug Lurked in Apache ActiveMQ Classic for 13 Years RCE	Writeup of CVE-2026-34197, a critical RCE vulnerability in Apache ActiveMQ Classic discovered by Horizon3.ai. This flaw, present for 13 years, can be chained with CVE-2022-41678, allowing attackers to exploit the Jolokia API and VM transport to execute OS commands. In some deployments, it can be combined with CVE-2024-32114 for unauthenticated RCE. Updates to ActiveMQ Classic 5.19.4 and 6.2.3 are recommended.
2026-04-08 2026	Hackers Targeting Ninja Forms Bug That Exposes WordPress Sites to Takeover RCE	Writeup on CVE-2026-0740, a critical unauthenticated arbitrary file upload vulnerability in Ninja Forms' File Uploads addon. This flaw, with a CVSS score of 9.8, allows attackers to bypass file type validation and use path traversal to upload malicious PHP code to the webroot, enabling remote code execution and complete site takeover. Defiant reports thousands of exploitation attempts against the ~50,000 affected websites. Users should update to version 3.3.27.
2026-04-07 2026	Guardarian Users Targeted With Malicious Strapi NPM Packages Supply Chain	Library of 36 malicious NPM packages targeting Strapi users, discovered by SafeDep, delivered payloads for Redis code execution, Docker container escape, credential harvesting, and reverse shell deployment. Payloads exploited Redis instances for webshells and reverse shells, escaped Docker containers, and targeted PostgreSQL databases. The campaign specifically aimed at Guardarian users, exfiltrating configurations and API modules, with attackers pivoting to reconnaissance and data collection after initial aggressive approaches failed.
2026-04-07 2026	Critical Flowise Vulnerability in Attacker Crosshairs RCE	Library updates address CVE-2025-59528, a critical remote code execution vulnerability in Flowise affecting versions up to 3.0.5. This flaw allows attackers to exploit unvalidated user-supplied JavaScript in MCP server configuration, granting full Node.js runtime privileges and access to the file system. Threat actors are actively exploiting this bug, posing an extreme risk to business continuity and sensitive data for thousands of exposed Flowise instances. Version 3.0.6 includes the patch.
2026-04-07 2026	North Korean Hackers Target High-Profile Node.js Maintainers Supply Chain	Analysis of UNC1069's social engineering campaign targeting Node.js maintainers, including those involved with Socket, Platformatic, Dotenv, and the Node.js Security Working Group. These attackers employ detailed, multi-week lures, mirroring tactics seen in Operation Dream Job and Contagious Interview, to trick high-profile maintainers into executing malware, as evidenced by the Axios supply chain attack.
2026-04-04 2026	European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Supply Chain	Writeup detailing the European Commission's data breach, confirming over 300GB of data theft from its AWS environment. Hackers exploited an API key compromised during the TeamPCP-led supply chain attack on Aqua Security's Trivy vulnerability scanner. The attackers leveraged tools like TruffleHog to discover secrets and exfiltrate data related to 71 clients of the Europa web hosting service, with the stolen information later appearing on the ShinyHunters leak site.
2026-04-03 2026	Critical ShareFile Flaws Lead to Unauthenticated RCE RCE	Writeup detailing chained vulnerabilities CVE-2026-2699 (Execution After Redirect) and CVE-2026-2701 (arbitrary file upload) in Citrix ShareFile. WatchTowr discovered these flaws allowed unauthenticated attackers to gain administrative access, exfiltrate sensitive files to attacker-controlled S3 buckets, and achieve remote code execution by uploading a web shell. The vulnerabilities were patched in ShareFile version 5.12.4.
2026-03-19 2026	Russian APT Exploits Zimbra Vulnerability Against Ukraine XSS	Writeup detailing CVE-2025-66376, a stored XSS vulnerability in Zimbra Collaboration's Classic UI, exploited by Russian APT28 (Forest Blizzard) in attacks against Ukraine. This flaw, addressable via CSS @import directives in email HTML, allows for credential theft, session token exfiltration, and mailbox data extraction. CISA has added this vulnerability to its KEV catalog, mandating patches for federal agencies.
2024-12-10 2024	SAP Patches Critical Vulnerability in NetWeaver SSRF	Writeup detailing SAP's December 2024 Security Patch Day, which includes nine new and four updated security notes. A critical Server-Side Request Forgery (SSRF) vulnerability, CVE-2024-47578, in NetWeaver AS for JAVA (Adobe Document Services) allows for full system compromise. Medium-severity flaws CVE-2024-47579 and CVE-2024-47580 permit file reading. Additionally, CVE-2024-54198, an authenticated information disclosure bug in NetWeaver, can be exploited via manipulated Remote Function Call (RFC) requests to gain sensitive credentials. Other addressed vulnerabilities include SSRF, XSS, and NULL pointer dereference.
2024-10-11 2024	GitLab Patches Pipeline Execution SSRF XSS Vulnerabilities SSRF	Library updates from GitLab address eight vulnerabilities in Community and Enterprise Edition releases. These include critical pipeline execution flaws like CVE-2024-9164 and CVE-2024-8970, a server-side request forgery (SSRF) impacting Product Analytics Dashboard, and a cross-site scripting (XSS) bug in application authorization. Additional fixes cover merge request diff viewing issues, deploy key vulnerabilities, guest user project template disclosure, and instance version disclosure.