North Korean Hackers Weaponize Stolen Developer Credentials to Poison Open-Source Packages
A North Korea-aligned group tracked as DeceptiveDevelopment has shifted from fake job-interview lures to stealing developer credentials outright, using them to inject malware into npm, PyPI, Packagist, Go,...
Trojanized Claude Code Extension Slipped Past Cursor’s Marketplace for 11 Hours, Planted SSH Backdoors
Cursor has confirmed that tampered versions of the popular Claude Code extension were live on its VS Code marketplace for roughly 11 hours in late October, quietly harvesting...
Attackers Weaponize GitHub Issues and Pull Requests to Hijack CI/CD Pipelines Across 61 Projects
Researchers at Radware uncovered a coordinated campaign that planted command-injection payloads inside GitHub issues, pull requests, and comments across 61 public repositories, aiming to hijack CI/CD workflows and...
Malicious LiteLLM 1.107.0 Package Steals Credentials and Opens RAT Channel
LiteLLM 1.107.0 was compromised on PyPI and in container images, delivering a credential stealer plus a remote-code loading mechanism. Anyone who installed the release should isolate affected systems,...
Stolen UpdraftCentral Keys Let Attackers Backdoor WordPress Sites
A breach at TeamUpdraft exposed remote-management keys that attackers used to push malicious plugins to connected WordPress sites. Administrators should update UpdraftPlus, remove old connection keys and hunt...
Midnight Mimosa Firmware Malware Infects Thousands of Budget Android Phones Worldwide
Researchers have traced a firmware-embedded malware campaign called Midnight Mimosa to thousands of low-cost Android devices across 150+ countries, giving attackers system-level control before a single app is...
Stolen ConnectWise Secret Opens 173 Microsoft 365 Tenants
An active supply-chain attack abused a compromised ConnectWise Cloud Backup credential to enter 173 Microsoft 365 partner and customer tenants. Defenders need to inspect service-principal sign-ins and newly...
Ledger Confirms Rogue Hardware Chip Hidden Inside Crypto Wallets Tied to Over $86 Million in Losses
Ledger has confirmed that at least one hardware wallet sold through Southeast Asian reseller CryptoBilis contained an unauthorized physical implant, following reports of crypto theft that investigators estimate...