Related Threat Clusters
-
Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities
In June 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including critical flaws in Windows kernel and BitLocker. Notable CVEs include a zero-day in Visual Studio Code that…
229 articles · Updated July 1, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
751 articles · Updated April 29, 2026 -
Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation
Dutch police, in collaboration with the National Cyber Security Centre (NCSC), have dismantled a massive botnet comprising over 17 million infected devices. The operation involved seizing more than 200 servers located…
29 articles · Updated May 29, 2026 -
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…
149 articles · Updated May 20, 2026 -
TeamPCP Exploits Trust in Open-Source Software and AI Tools
In a span of four months, the threat actor TeamPCP has compromised over 1,000 open-source software packages, injecting malicious code and exploiting the trust developers place in these resources. The attack method…
7 articles · Updated June 19, 2026 -
Supply Chain Attack Targets Microsoft Entra ID via Compromised Nx Console Extension
On May 18, 2026, a compromised version of the Nx Console VS Code extension was uploaded to the Visual Studio Code Marketplace, targeting developer credentials and cloud infrastructure tokens. This attack exploited…
9 articles · Updated May 19, 2026
Recent Intelligence Reports
- Episode 372 — www.watchguard.com · July 25, 2026
- How software development’s speed obsession enabled TeamPCP’s chaos crusade — Cyberscoop · June 18, 2026
- CISA urges security teams to check for software development compromises — Ground.News · May 30, 2026
- Risky Bulletin: Dutch police take down giant botnet of 17 million devices — News.Risky.Biz · May 29, 2026
- Hackers Infiltrate GitHub by Compromising Employee Device — Uk.Pcmag · May 20, 2026
- GitHub admits major source code leak after 3,800 internal repositories breached — Csoonline · May 20, 2026
- GitHub Breached via VS Code Extension — Aikido.Dev · May 20, 2026
- Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer — Thehackernews · May 19, 2026