GitHub

NightEagle APT Targets Russian Enterprises with Advanced Malware

APT36 Launches Operation RapidRust with New Rust Malware Tools

North Korean Hackers Utilize EtherHiding for Cryptocurrency Theft

Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

Webworm APT Expands Operations to Europe with New Backdoors

North Korean Actors Exploit GitHub in Multi-Stage Malware Campaign Against South Korea

Operation Blinder Tunnel Targets Iraqi Critical Infrastructure

Critical Vulnerability in Notepad++ Allows DoS and Memory Disclosure

Supply Chain Attack: GHAPPIER Loader Exploits npm Trusted Publishing

AI Tool ARTEX Confirmed in Shinhan Bank Data Breach

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems

Supply Chain Attack Targets Checkmarx KICS Tool via Docker and VSCode Extensions

TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack

Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

Bitwarden CLI Compromised in Supply Chain Attack via npm

North Korean IT Workers Infiltrate Major DeFi Protocols for Seven Years

Critical Gitea Vulnerability CVE-2026-60004 Actively Exploited

Critical PHP Vulnerabilities Exploited During Cybersecurity Black Week

Checkmarx Jenkins Plugin Compromised by TeamPCP Malware Attack

Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents

Critical Vulnerability in Claude Code GitHub Actions Exposes Repositories to Attacks

Critical RCE Vulnerability in Microsoft GitHub Repository Disclosed

Malicious AI Skills Campaign Targets 1.7 Million Users, Exposes Major Vulnerabilities

FBI Warns of Kali365 Phishing Kit Targeting Microsoft 365 Users

North Korean Hackers Target Rust Developers with Job Scam

North Korean Hackers Leverage AI for Phishing and Malware Development

North Korea Adopts Modular Malware to Evade Detection and Takedowns

DarkBlinders Targets Israeli and Kurdish Government Entities in Espionage Campaign

TAG-193 Targets Central Asian Governments in Espionage Campaign

GlassWorm Malware Campaign Targets OpenVSX with 73 Malicious Extensions

BRONZE SANDCASTLE Exploits DLL Sideloading for Cyber Attacks

Kimsuky Hacking Group Uses AI Coding Agent for Malware Decoys

Tensorlake npm Package Compromised by Shai-Hulud Worm

GitHub Patches Critical RCE Vulnerability CVE-2026-3854

Operation Navy Ghost Targets Telegram Bot Developers with Malicious PyPI Packages

Cordyceps Vulnerability Exposes Thousands of Code Repositories to Attacks

Re-enabled Malicious GitHub Actions Expose Thousands to Mini Shai-Hulud Payload

Malicious PyPI Package Compromises Developer Data and Cryptocurrency Wallets

Trivy Vulnerability Scanner Compromised in Supply Chain Attack

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

LiteLLM 1.107.0 Compromised: Credential Stealer and RAT Distributed via PyPI

LLMJacking Threat: Cybercriminals Racking Up $1 Million in Fraudulent Cloud Charges

PoeLLM Malware Compromises 3,400+ AI Servers via GitHub Poem

Unauthenticated remote code execution via `eval()` on format-string

Bee Js Compromise

Google Gemini Safety Filter Bypass Exposes Blocked AI Images Through Download Links

Lakera found credentials

Devalue 5.8.0 Before 5.9.3 Denial Of Service Via Stringifyasync Unhandled Rejection

GCVE: Global CVE Allocation System Guide

Tokens de acceso sin vencimiento — el 99% de los repositorios corporativos queda expuesto indefinidamente

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Openais Ai Coding App Comes To Windows At Last

Sample Remote Coding Agent

Extend Claude Code to remote sessions on Amazon Bedrock AgentCore with security controls

Ocap Bounded Authority

WorkOS analysis of agent credentials

AI Agent Credentials: Edera Announces Scope Limits

Agentes de IA autónomos aceleran robo de credenciales en GitHub — cinco minutos desde el escaneo hasta la exfiltración

2026 11 02 Pull Request Target Blocked By Default December 2

2026 09 17 Workflow Execution Protections In Github Actions Generally Available

Launching The Secrets Revocation Program

Truffle Security launches program to revoke 1.4 million live secrets

Incident Report Unsanctioned Agent Behaviour During Cyber Testing

Vercel Security Review

Edera Redefines AI Agent Security with Bounded Authority and Credential

Csa Research Note Deadbugz Mcp Supply Chain 20260830 Csa Sty

North Korean hackers are targeting Estonia's IT experts, report finds - news

Tencent's Official Nikke Launcher Used to Spread Malware

Vercel Security Review

Acronis previously reported

TrendAI's post

Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

Vercel Security Review now in public beta

Surrealdb 2.0.0 Before 3.3.1 Deny Funcs Capability Bypass Via Method Style Invocations

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

AI coding agents are installing MCP servers that will never be patched

Goldman Sachs pulls AI coding tools from traders and bankers

Darkblinders

The Internals Of A Badbox Operation

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

Mcp Or Just A Command

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work

Byoky: Open

Do AI Agents Really Need MCP Servers? Here's What the Numbers Say

Alignment Assessment Ukaisi

Lightning AI