Mini Shai-Hulud Worm Compromises Popular npm Codegen Package
A supply-chain worm hit a 150K-download npm package, while malicious Packagist themes targeted iPhones and WatchGuard patched critical VPN RCEs.
In this digest
Security Intel Feed
Cyber Hose
Page 47 of 93
Read digest
PaperCut NG/MF flaws added to KEV after active exploitation
PaperCut NG/MF flaws under active exploitation lead this digest, alongside AWS root account password-spraying and new Mirage Kitten malware.
In this digest
BGP Hijack Delivers Malicious Virtualizor Update to Hypervisor Servers
Attackers used a BGP hijack to deliver a malicious Virtualizor update enabling root backdoor access on hypervisor nodes.
In this digest
Australia charges two alleged TeamPCP hackers after supply-chain
Australia charges two alleged TeamPCP hackers following a series of software supply-chain attacks.
Read digestDOJ seizes QTFY domains used to target U.S. critical infrastructure
The DOJ and FBI seized domains used by Chinese hacking group QTFY targeting U.S. critical infrastructure and federal agencies.
In this digest
TONIC Price Manipulation Drains $74 Million From Cronos' Tectonic
A $74M Tectonic exploit halted Cronos, a honeypot trapped coding-agent sessions, and 1,776 satellite systems were found exposed.
In this digest
DPRK Job Fraud Expands Beyond IT Into Healthcare, Sales and Marketing
DPRK-linked actors expand fraudulent hiring beyond IT into healthcare and sales, while eight MCPHub CVEs surface with a CVSS 9.9 RCE.
In this digest
CVE-2026-66047: ProfilePress Plugin Unauthenticated Arbitrary Install
A CVSS 9.2 ProfilePress WordPress plugin flaw leads this run, alongside sensitive information exposure and SQL injection vulnerabilities.
In this digest
- CVE-2026-66047 — CVSS 9.2 — ProfilePress WordPress Plugin before 4.17.2 Unauthenticated Arbitrary Plugin Installation
- CVE-2026-75133 — CVSS 8.7 — Keep Backup Daily WordPress Plugin before 2.1.4 Sensitive Information Exposure
- CVE-2026-75132 — CVSS 7.1 — WAPT Server SQL Injection via /api/v3/hosts Endpoint
McKesson Confirms Breach as ShinyHunters Claims 284M Records Stolen
McKesson confirms a breach with 284M records claimed by ShinyHunters, a public PoC targets Kaspersky Endpoint Security, and several high-CVSS CVEs emerge.
In this digest
KindaRails2Shell Ruby on Rails Flaw Exploited for Remote Code
Attackers exploit a critical Ruby on Rails flaw enabling unauthenticated RCE, affecting about 7,000 exposed instances.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check