Cyber Hose

In this digest

• GitHub breached via poisoned VS Code extension
• Critical NGINX flaw actively exploited
• haveged permission-check flaw could lead to root exploit

In this digest

• npm adds 2FA-gated publishing and package install controls
• Packagist supply-chain attack infects 8 packages

In this digest

• Laravel Lang packages hijacked to deploy credential-stealing malware

In this digest

• Claude Mythos AI finds 10,000 high-severity flaws in widely used software

In this digest

• Underminr DNS flaw lets attackers hide C2 behind trusted domains
• Laravel-Lang PHP packages compromised with credential stealer

In this digest

• LiteSpeed cPanel plugin flaw exploited to run scripts as root
• Drupal core SQL injection added to CISA KEV

In this digest

• Stack strings in high-level languages

In this digest

• Cisco SD-WAN auth bypass exploited by 10+ threat clusters
• Highly critical SQL injection in Drupal core
• Mini Shai-Hulud worm bypasses build integrity controls

In this digest

• Dirty Frag: Linux kernel privilege escalation chain with public exploit
• Cisco Catalyst SD-WAN auth bypass under active exploitation
• Verizon DBIR 2026: exploitation overtakes phishing

In this digest

• Copy Fail: Linux kernel privilege escalation with reliable public exploit
• Cisco Catalyst SD-WAN auth bypass under active exploitation
• Mini Shai-Hulud worm compromises 170+ npm and PyPI packages