Mobile Security & Privacy LiteLLM Uncovers How Leaked Master Key Led to Malicious Package Push and Software Supply Chain Compromise October 25, 2026 Pevita Pearce LiteLLM developers have disclosed the detailed chain of events behind a major security breach, revealing that an Agent Platform master key accidentally published to a public GitHub repository late last…
Mobile Security & Privacy Microsoft Warns State-Backed Threat Group Storm-0940 Uses Agentic AI in ConnectWise Supply Chain Compromise October 22, 2026 Nana Microsoft has revealed that a China-aligned state-sponsored threat group known as Storm-0940 was behind the recent, high-profile supply chain compromise targeting the ConnectWise Cloud Backup application. According to the technology…
Mobile Security & Privacy GhostAction Supply Chain Attack Escalates With Automated Phishing, OAuth Exploits, and Persistent Developer Stealers October 19, 2026 Lina Hope The threat actors orchestrating the widespread GhostAction supply chain attack have significantly expanded their operational tactics. Rather than relying solely on injecting malicious GitHub Actions workflows into compromised open-source projects,…
Mobile Security & Privacy Major Supply Chain Attack Exploits Compromised ConnectWise Cloud Backup Credentials to Target Microsoft 365 Environments October 18, 2026 rifanmuazin Cybersecurity researchers are sounding the alarm over an active and sophisticated supply chain campaign in which unknown threat actors have abused compromised Microsoft 365 credentials belonging to ConnectWise Cloud Backup,…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Attack Campaign October 18, 2026 Nana Muazin Cybersecurity researchers have uncovered a malicious npm package disguised as a utility library, marking the latest escalation in a sophisticated and long-running software supply chain campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Campaign October 18, 2026 Suro Senen Cybersecurity researchers have uncovered a malicious npm package disguised as an image decoding utility, marking the latest evolution in an ongoing software supply chain attack campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Discovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Neng Nana Cybersecurity researchers have uncovered a newly identified malicious npm package actively circulating within the open-source software ecosystem. The package is the latest weapon in a persistent and evolving software supply…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
Consumer Electronics & Hardware EU and China Discuss Quid Pro Quo Deal to Lift Sanctions and Save ASML Supply Chain Component Maker October 15, 2026 Asep Darmawan The European Union is currently engaged in high-stakes diplomatic and economic negotiations with China aimed at lifting severe restrictions that Beijing has imposed on Sindlhauser Materials GmbH, a critical German…
Mobile Security & Privacy Major Open-Source Maintainer Accounts Compromised in Renewed "GhostAction" Supply Chain Attack Campaign October 10, 2026 Pevita Pearce Cybersecurity researchers have issued urgent warnings regarding an ongoing, highly sophisticated credential-theft campaign that has successfully compromised high-profile open-source maintainer accounts to covertly inject malicious automated workflows into hundreds of…
