seen from Russia
seen from Netherlands
seen from Türkiye
seen from Malaysia
seen from United States
seen from United States
seen from Malaysia
seen from Kosovo
seen from China
seen from China
seen from United States
seen from United Kingdom
seen from Malaysia
seen from United States
seen from United Kingdom
seen from China
seen from United States
seen from China
seen from Canada
seen from Canada
Supply Chain Attacks, FortiBleed, and SocGholish Takedown Define a Turbulent Cyber Week
North Korean and Russian-linked operations dominated the week as Operation Endgame dismantled SocGholish infrastructure, FortiBleed exposed tens of thousands of Fortinet credentials, and supply chain attacks hit npm, JetBrains, and WordPress ecosystems amid active exploitation of critical flaws in Oracle PeopleSoft and Cisco SD-WAN.
Source: CyberSecBrief – Weekly Briefing
US Scraps Mandatory Software Supply Chain Rules
US federal agencies are no longer required to follow standardised software supply chain security mandates, shifting responsibility back to individual risk assessments.
Source: Socket
Read more: CyberSecBrief
Fake AI Coding Tools Quietly Drained 70,000 Developers' API Keys
Fifteen malicious plugins posing as AI coding assistants on the JetBrains Marketplace spent eight months silently siphoning OpenAI, DeepSeek, and SiliconFlow API keys from tens of thousands of developers and shipping them to an attacker-controlled server in Beijing.
Source: StepSecurity
Read more: CyberSecBrief
Malicious AI Agent Skills Turn Developer Tools Into Malware Delivery Systems
Hundreds of OpenClaw marketplace “skills” disguised as utilities secretly triggered staged downloads that installed password-stealing malware on affected machines.
Source: Socket
Read more: CyberSecBrief
GlassWorm Expands via GitHub-Hosted VSIX Extensions
Dormant VSX extensions were activated to deliver trojanised VSIX files from GitHub, bypassing registry takedowns and executing AES-256 payloads in memory with Solana blockchain C2.
Source: Socket
Read more: CyberSecBrief
Supply Chain Attacks and Nation-State Campaigns Intensify Across Ecosystems
Self-propagating malware in npm and PyPI, Open VSX extension abuse, and exploited Cisco vulnerabilities drove sustained supply chain compromises alongside North Korea-linked and China-linked espionage operations.
Source: CyberSecBrief – Weekly Briefing
StegaBin npm Packages Deploy Multi-Stage Malware
26 malicious npm packages used Pastebin steganography to hide command-and-control infrastructure, deploying a remote access trojan and a nine-module infostealer toolkit.
Source: Socket
Read more: CyberSecBrief
