Intelligence Feed

1mo ago · bleeping-computer

A phishing campaign impersonates over 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, to target marketing professionals with fake job interviews. The attackers abuse legitimate platforms like PeopleForce and Salesforce Marketing Cloud to increase credibility, using nested redirects to deliver a malicious landing page. Victims are prompted to sign into their Google accounts via a fake 'Continue with Google' page that uses browser-in-the-browser (BitB) technique to mimic legitimate authentication, enabling credential theft.

1mo ago · hacker-news

Threat actors are actively probing and attempting to exploit CVE-2026-20896, a critical vulnerability in Gitea Docker images that allows unauthenticated remote users to gain elevated access by spoofing the 'X-WEBAUTH-USER' HTTP header. The flaw arises from the default configuration trusting all IP addresses due to a wildcard in the 'REVERSE_PROXY_TRUSTED_PROXIES' setting. Exploitation attempts were detected just 13 days after public disclosure, with initial activity observed from a ProtonVPN IP address. Although no full exploitation has been confirmed yet, the risk remains high for unpatched internet-facing instances.

1mo ago · hacker-news

A suspected China-nexus threat actor is conducting a targeted cyber espionage campaign against Indian taxpayers, tax professionals, and corporate finance teams using spear-phishing emails impersonating the Indian Income Tax Department. The campaign, dubbed Operation DragonReturn, delivers DcRAT via a malicious fake tax filing utility to steal sensitive data and establish persistent access. The attackers use social engineering, DLL side-loading, image-based payload concealment, and Windows service persistence to maintain long-term access to compromised systems.

1mo ago · hacker-news

The article discusses how to evaluate AI-powered Security Operations Center (SOC) platforms in 2026, emphasizing the importance of real-time data correlation, full-lifecycle automation, and measurable outcomes. It contrasts true AI SOC platforms with 'bolt-on' AI solutions that offer limited automation. The focus is on architectural capabilities rather than marketing terms, with Exaforce's Exabots highlighted as an example of an agentic AI SOC platform performing detection, triage, investigation, and response. No specific malicious threat activity, threat actor, or compromise indicators are described.

1mo ago · hacker-news

The article covers multiple cyber threats including the disruption of the NetNut residential proxy network, which leveraged compromised home devices to route malicious traffic. Threat actors are targeting researchers with fake proof-of-concept repositories delivering the ChocoPoC RAT, while the Scattered Spider group is linked to extortion attempts. New malware such as Ousaban and browser-based ransomware exploit social engineering and legitimate browser APIs, and AI-driven attacks are increasing in sophistication, including indirect prompt injection and fake phishing pages generated via AI.

1mo ago · bleeping-computer

Threat actors are actively exploiting a maximum-severity vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, to achieve remote code execution on unpatched systems. The flaw affects ColdFusion versions 2025.9, 2023.20, and earlier. Exploitation began within two hours of public disclosure, prompting urgent warnings from KEVIntel and the Canadian Center for Cyber Security. Adobe urges administrators to apply patches immediately to mitigate risk.

1mo ago · bleeping-computer

The article discusses the evolution of software development from Waterfall to Agile, DevOps, and now 'Vibe Coding,' where generative AI enables rapid application creation through natural language prompts. This acceleration introduces significant security risks, as AI-generated code may contain vulnerabilities, architectural flaws, or compliance issues despite appearing functional. Traditional secure development practices like threat modeling, code review, and least privilege remain critical to mitigate these risks. The article warns that without proper governance, Vibe Coding could become a modern form of shadow IT—innovative but potentially dangerous.

1mo ago · socket-dev

The Node.js Security Working Group is considering a shift to a public workflow for handling lower-severity security reports due to an overwhelming influx of AI-generated vulnerability submissions via HackerOne. Security maintainer Rafael Gonzaga attributes the surge to LLM-driven fuzzing and scanning tools, which produce highly similar reports, undermining the value of private disclosure. The proposal aims to reduce operational overhead by reserving private embargo processes for high-severity issues while enabling public handling for others, though maintainers remain divided on whether this change will alleviate workload bottlenecks.

1mo ago · hacker-news

Researchers from the Hong Kong University of Science and Technology have demonstrated SKILLCLOAK, a technique that enables malicious AI agent skills to evade static scanners by using self-extracting packing and obfuscation methods. These cloaked skills hide payloads in ignored directories like .git/ or use character substitution and command splitting to bypass pattern-based detection, remaining undetected in over 90% of cases across eight tested scanners. The study also introduces SKILLDETONATE, a runtime behavioral checker that detects 97% of attacks by monitoring system-level activity, highlighting the insufficiency of static analysis alone. Real-world marketplaces already host malicious skills using similar evasion tactics, indicating active exploitation.

1mo ago · hacker-news

A vulnerability in Opera GX allowed malicious websites to silently install browser mods in the form of .crx files without user interaction, enabling attackers to exfiltrate sensitive data such as Gmail addresses via universal CSS injection. The attack exploited the browser's auto-install feature for mods, which applied malicious CSS rules across all visited sites, facilitating cross-site leak (XS-Leak) techniques. Although Opera patched the flaw in version 130.0.5847.89 and found no evidence of in-the-wild exploitation, the zero-click nature of the attack made it highly effective once triggered.

1mo ago · hacker-news

A new Java-based remote access trojan (RAT) named QuimaRAT has emerged as a malware-as-a-service (MaaS) offering, targeting Windows, Linux, and macOS systems. The malware features a modular architecture with encrypted plugins delivered from command-and-control (C2) infrastructure and supports cross-platform persistence mechanisms. It includes tools for stealthy delivery, such as browser-cache staging and fileless execution, while evading detection through trusted execution paths and obfuscation techniques.

1mo ago · hacker-news

Researchers at Shandong University have demonstrated a new data exfiltration technique called TrojPix, which leverages video cable emissions to leak data from air-gapped systems by modulating on-screen pixels imperceptibly. The method requires prior malware presence on the system but does not need admin rights or hardware modifications, enabling data transmission at up to 8.1 Mbps over distances up to 208 meters. This technique represents a significant advancement in covert channel speed and range, though it remains experimental and not yet observed in real-world attacks.

2mo ago · bleeping-computer

JadePuffer ransomware represents the first documented case of a ransomware operation fully automated by a large language model (LLM) agent. The AI-driven attack exploited CVE-2025-3248 in Langflow to gain initial access, then performed reconnaissance, credential theft, lateral movement, and encryption autonomously. The agent adapted to failures in real time, demonstrating human-like operational resilience and rapid iteration. It encrypted 1,342 Nacos configuration items and left a ransom note with a Proton Mail contact and a Bitcoin address, though the encryption likely used AES-128-ECB rather than AES-256 as claimed.

1mo ago · socket-dev

PolinRider is a North Korea-linked supply chain campaign targeting developer ecosystems, including npm, Packagist, Go modules, and Chrome extensions. The threat actors compromise maintainer accounts, modify legitimate repositories with obfuscated JavaScript loaders, and use Git history rewriting to conceal malicious changes. These loaders retrieve encrypted second-stage payloads from blockchain infrastructure, execute them via eval(), and have delivered malware such as DEV#POPPER and OmniStealer. The campaign remains active, with ongoing compromises across multiple open source platforms.

2mo ago · step-security

A coordinated supply chain attack spanning eight months involved 15 malicious JetBrains plugins that stole AI API keys from approximately 70,000 developers. The plugins, masquerading as legitimate AI coding assistants, exfiltrated OpenAI, DeepSeek, and SiliconFlow API keys to a command-and-control server in Beijing. The stolen credentials were transmitted in plaintext over HTTP, and the attacker's infrastructure remains active despite JetBrains' removal of the plugins and banning of associated accounts.

2mo ago · step-security

On June 24, 2026, a coordinated supply chain attack compromised 20 npm packages within the Leo Platform ecosystem, all published within a 3-second window. The malicious packages contain a CI/CD attack toolkit that steals secrets from GitHub Actions runners, cloud environments, and credential stores, then exfiltrates them using the victim's own GitHub token. The attack uses the same 'Phantom Gyp' technique and obfuscation chain as the earlier Miasma campaign, indicating the same threat actor. These packages collectively receive around 13,600 weekly downloads, posing significant risk to CI/CD pipelines.

1mo ago · socket-dev

GitHub has released actions/checkout v7 to mitigate a long-standing supply chain risk in GitHub Actions where privileged workflows using pull_request_target could execute attacker-controlled code from untrusted pull requests. These workflows run with elevated permissions, including access to secrets and tokens, and previously allowed malicious actors to steal credentials or publish malicious packages. The update blocks unsafe checkouts by default, particularly those pulling code from forked pull requests in high-privilege contexts. This change addresses a known attack pattern exploited in recent incidents involving Nx, PostHog, and TanStack.

1mo ago · socket-dev

The article discusses the growing risk of software supply chain attacks in the era of AI-powered development, where AI agents autonomously pull and execute unvetted open source packages outside traditional security monitoring. These agents operate in blind spots, such as ephemeral sandboxes, where no scanning or registry controls exist. The speed of modern attacks—often exploiting vulnerabilities within hours of disclosure—exceeds traditional response timelines, rendering forensic-focused defenses ineffective. Proactive governance at the point of package ingestion, supported by real-time threat intelligence, is presented as a necessary defense.

1mo ago · socket-dev

The U.S. government abruptly suspended global access to Anthropic's AI models, Claude Fable 5 and Mythos 5, citing national security risks following jailbreaks and unauthorized vulnerability discoveries in federal systems. The models, used for automated code analysis, were deemed a supply chain risk, prompting a federal blackout and export controls under ECRA. The shutdown highlights the growing classification of advanced AI as critical infrastructure, with significant implications for enterprise dependency and national cybersecurity policy.

1mo ago · socket-dev

A new wave of the Miasma Mini Shai-Hulud supply chain attack has compromised npm packages under LeoPlatform and RStreams, as well as a Go module associated with Verana Blockchain. The campaign uses malicious binding.gyp files in npm packages to trigger JavaScript execution during installation, stages payloads via Bun, and targets developer environments, CI/CD pipelines, and GitHub Actions for credential theft. It also spreads through poisoned repositories and source configurations, with persistence mechanisms targeting AI coding assistants and IDEs. The activity overlaps with prior incidents involving the same malware family and operational markers like 'RevokeAndItGoesKaboom'.

1mo ago · socket-dev

The Rolldown and Vite projects withdrew a Rust-based React Compiler integration due to a 17% increase in binary size, raising concerns about framework-specific bloat in otherwise agnostic tools. The integration, funneled through the Oxc project, aimed to improve build performance but faced criticism for imposing costs on all users regardless of React usage. The debate highlights a broader tension in frontend tooling between performance gains from native Rust integrations and the overhead of larger binaries, with potential implications for other frameworks like Vue, Svelte, and Angular.

1mo ago · socket-dev

The Miasma Mini Shai-Hulud supply chain campaign has expanded to compromise legitimate @immobiliarelabs npm packages, specifically Backstage plugins for GitLab and LDAP authentication. Malicious versions were published on June 26, 2026, using a hidden root-level index.js to execute a multi-stage payload that steals developer and CI/CD secrets, including tokens, SSH keys, and cloud credentials. The attack leverages GitHub Actions deployment triggers and may have originated from a compromised third-party GitHub Action, codfish/semantic-release-action, enabling further propagation through poisoned workflows and exfiltration to attacker-controlled repositories.

1mo ago · socket-dev

Malicious Chrome and Firefox browser extensions branded as 'VPN Go: Free VPN' have been distributing clipboard-stealing malware through staged updates. Initially appearing as legitimate free VPN tools, the extensions later added functionality to monitor and exfiltrate clipboard data, including passwords, API keys, and cryptocurrency addresses. The stolen data is sent to hardcoded IP addresses using HTTP GET requests with chunked encoding and session identifiers. Both extensions use obfuscated JavaScript and share infrastructure, indicating a coordinated campaign targeting user privacy under the guise of security.

1mo ago · socket-dev

The article discusses a surge in software supply chain attacks, where threat actors compromise popular open source packages and leverage trusted development workflows to distribute malicious code. The rise of AI coding agents exacerbates the risk by automatically pulling in dependencies without sufficient review, increasing the speed and scale of potential compromise. Attackers are targeting development tools such as package registries, IDE extensions, and source repositories, often evading traditional security measures.

1mo ago · socket-dev

1mo ago · wiz

The article discusses the evolving threat landscape in the AI era, emphasizing the need for real-time detection and containment of threats that leverage AI-driven techniques such as prompt injection, supply chain abuse, and exploitation of cloud-native AI services. Traditional detection methods are insufficient due to limited visibility, high false positive rates, and slow manual response times. Wiz addresses these challenges by providing comprehensive telemetry across cloud, workload, identity, and AI model layers, enabling automated investigation with the Blue Agent and rapid containment via orchestrated workflows.

1mo ago · wiz

AI is transforming both offensive and defensive cybersecurity operations by accelerating software development and exploit creation. Attackers are leveraging AI to shorten exploitation timelines, challenging the traditional assumption that defenders have time to respond. Defenders can gain an advantage by using AI to maintain continuous, context-rich understanding of their environments across cloud, workload, and model layers, enabling faster and more accurate incident response.

1mo ago · wiz

Wiz introduces runtime signals in its Security Graph to uncover hidden attack paths in cloud environments by correlating live network connections with existing risk findings. This new capability reveals previously invisible threats, such as internet-facing AI chatbots with vulnerabilities that actively connect to external MCP servers or sensitive data stores. By integrating real-time telemetry from workloads, Wiz identifies complete, validated attack paths—like a vulnerable container with a live connection to an S3 bucket containing PII—enabling security teams to prioritize and remediate critical risks before exploitation.

1mo ago · wiz

Wiz Research discovered a high-severity vulnerability (CVE-2026-12957) in the Amazon Q Developer Extension for VS Code that allowed arbitrary code execution and cloud credential theft when a developer opened a malicious repository. The vulnerability stemmed from the extension automatically loading and executing MCP server configurations from workspace files without user consent. Combined with full environment inheritance, this enabled immediate execution of malicious commands with access to cloud credentials, posing a significant risk to developers and cloud environments.

1mo ago · wiz

The Red Agent, an autonomous AI-powered security testing tool, discovered a critical Broken Object-Level Authorization (BOLA) vulnerability in an airline's public GraphQL booking API. By exploiting sequential integer identifiers without backend authorization checks, the agent gained unauthenticated access to sensitive passenger data, including personal information, contact details, billing addresses, and active flight itineraries. The vulnerability allowed full read and write capabilities, enabling data exfiltration and unauthorized modifications to bookings, demonstrating a systemic authorization flaw in the API's resolver layer.