Supply chain

November 8, 2026

• Crédit Mutuel Arkéa now identifies a service-provider platform as the entry path for its cyber heist. The bank says the attacker used Arkéa’s own account—not customer accounts—to transfer funds to other institutions and convert them into cryptocurrency. It does not confirm the reported €118 million figure, only its order of magnitude, and says some funds were blocked, according to BleepingComputer (earlier coverage). (discussion) · Incidents & Cybercrime

November 2, 2026

• Alpine Linux rebuilt its GitLab instance from scratch and reset all passwords after October 20–21 attacks against CVE-2026-97229. Eight worker crashes, four partially successful, none confirmed to have reached code execution — but missing logs and no outbound connection records meant they could not rule it out. Alpine had installed 19.3.4 rather than 19.3.5, and a later move to 19.3.6 still didn't close the hole because the fix required a Ruby patch GitLab bundles in official packages but Alpine's custom container image lacked. The attackers also downloaded Alpine's GitLab container image, suggesting supply-chain preparation; no tampering was found in commits, packages or releases through October 27, and signing keys are not stored on the server (BleepingComputer, earlier coverage). · Supply Chain
• NetamLoader gets its technical breakdown: Kaspersky found a CAB archive dropped into C:\Windows\SoftwareDistribution\Download\ on a custom Windows 10 build used exclusively by Asian government entities, containing four legitimate Patch My PC components plus a .config file abusing AppDomainManager injection to load arbitrary .NET assemblies inside a trusted process. Supply-chain delivery is suspected, the actor is unattributed, and it is unclear whether more than one machine was hit (The Hacker News, earlier coverage). · Threat Intelligence

October 31, 2026

• Trezor is warning buyers of a suspected hardware implant in a Safe 5 bought from reseller CryptoBilis via Tokopedia in August: an extra board between the mainboard and screen carrying a cellular module and antenna, reportedly able to read the displayed recovery phrase and transmit it over a mobile network. Trezor has not yet received the unit; it is telling anyone who bought from CryptoBilis since March 2026 to move funds to a new wallet and seed. Same reseller as the earlier Ledger implant case (BleepingComputer). · Supply Chain & Developer Tooling

October 30, 2026

• Radware tracked 83 CI/CD attacks against 61 public GitHub repositories — including Google LangExtract, Trivy, Brave browser and MLflow — with 77 of the malicious items posted in a 43-minute window on 1 September and six more in the two minutes after. Commands hidden in HTML comments inside issues, PRs and comments triggered vulnerable workflows within a second to steal credentials and tokens; 74 accounts, many with real commit histories, were used (The Register) (discussion). · Supply Chain & Build Pipelines
• Polymarket halted trading in cancel-only mode after attackers compromised a third-party service to serve crypto-draining JavaScript; roughly $2.5M has been traced to a suspected attacker wallet (BleepingComputer, status page). · Threat Activity & Breaches
• DebugBear suffered an intrusion in which a script it serves to downstream web apps was replaced; the injected code sits inside trading sessions and attempts to sell user positions and transfer assets — the same pattern as the Adform incident (@GossiTheDog). · Threat Activity & Breaches

October 29, 2026

• A skimmer group hijacked a shared analytics script used by e-commerce platform Convertr to lift payment card data at checkout across its merchant base (BleepingComputer). · Breaches & Industry

October 26, 2026

• GHEIST weaponized stolen GitHub tokens at scale, but GitHub controls blocked the public-repository runs examined. Wiz observed more than 13,500 planted branches across over 850 repositories since September 15. The campaign’s sync-check workflow was designed to Base32-encode repository and environment secrets into logs, retrieve those logs through the API and delete the run. Every public-repository execution Wiz inspected was held for approval by GitHub’s malicious-workflow protection; the campaign was still evolving on October 24 (Wiz Research). · Supply Chain & Identity
• The earliest confirmed malicious LiteLLM workflow ran 11 days before the poisoned release. Socket recovered two secret-exfiltration workflows that successfully ran from short-lived, deleted branches on October 10 and 12, establishing attacker access well before litellm==1.107.0 shipped on October 21 (Socket). Microsoft’s analysis adds that the malicious startup hooks could execute whenever Python initialized, even without importing LiteLLM; investigators should not invoke Python or pip inside suspect environments, and package removal alone is insufficient recovery (earlier coverage). · Supply Chain & Identity

October 25, 2026

• LiteLLM's post-mortem traces the poisoned 1.107.0 release to an unrevoked master key (earlier coverage). A config file committed to the public LiteLLM-Labs/lite-harness repo on May 27 carried the Agent Platform master key; the commit was force-pushed over but the key was never rotated. On October 10 the attacker used it to pull an unscoped GitHub CLI OAuth token tied to the org owner's account, exfiltrated two maintainers' tokens via a webhook.site endpoint, then on October 21 overrode branch protection and repointed the release pipeline at a lookalike Berri-AI/litellm repo. PyPI quarantined the package 1h17m after publication. (The Hacker News) · AI & Model Security

October 24, 2026

• LiteLLM now traces its poisoned release to a master key exposed in May that was never revoked, replacing the earlier theory that GitHub tokens were stolen from internal gateway logs. The key was used on October 10 to obtain a GitHub org owner's OAuth token; malicious CI workflows then harvested more maintainer credentials, and stolen identities approved the pipeline that published the backdoored v1.107.0 on October 21. Socket independently recovered malicious workflows executed on October 10 and 12 (LiteLLM, BleepingComputer) — a materially different root cause than the earlier post-mortem. · Supply Chain & Trust

October 21, 2026

• Five OVHcloud CLI releases were replaced with secret-stealing builds for up to 94 minutes on October 19. A hijacked contributor account modified the GitHub assets for versions 0.11.0 through 0.15.0. OVHcloud says its initial checks found no other affected repository and advises anyone who executed the files to rotate secrets stored on disk; version 0.10.0 was clean. The Stack and BleepingComputer have the details. · Cloud & Software Supply Chain

October 20, 2026

• Official Rank Math PRO packages delivered a persistent WordPress backdoor during an 11-hour compromise window. Version 3.0.123 downloaded or installed between October 15 at 20:02 UTC and October 16 at 07:12 UTC could create hidden administrators and scheduled tasks, execute commands, and expose database credentials, API keys, SSH keys, and cloud credentials. Rank Math released clean version 3.0.124, but says sites where the malicious build was activated should be treated as compromised rather than merely updated. BleepingComputer · Supply Chain, Cloud & Identity

October 19, 2026

• AOMEI’s trusted software distribution path was compromised in an active supply-chain attack. @campuscodi reports that attackers replaced backup packages on company servers in bursts lasting five to ten minutes. @cyb3rops relayed Microsoft Threat Intelligence’s notice that it was tracking the operation. Public details remain thin, with no affected versions or customer scope established. · Threat Activity & Supply Chain

October 18, 2026

• ConnectWise Cloud Backup (formerly SkyKick) is the pivot in an active Microsoft 365 supply-chain compromise. Microsoft Threat Intelligence says the actor abused the multitenant app's existing consent — including Directory.ReadWrite.All — to obtain access tokens, observing broad successful service-principal authentication from 144.172.64[.]128 on October 15, followed by Microsoft Graph reconnaissance and attempts to add new credentials to the service principal as a backdoor, which survives revocation of the original compromised credential (Microsoft Threat Intelligence). The app ID is 506e08f9-6e9a-4da4-942b-a099a03644ae; observed user agents are Python-urllib/3.12 and python-requests/2.31/2.34.2. Huntress, which raised the alarm on October 16, says the actor signed into 173 tenants, up from its initial 162 (Huntress, BleepingComputer, The Hacker News). · Cloud & Identity

October 15, 2026

• Ledger implant reports have expanded to authorized European retail. Zero Day says a German owner found implants in two Nano X wallets purchased from MediaMarkt; separate reports now involve Flex and Stax devices. Ledger says it sees no evidence its own infrastructure or services were breached, and some broader reports remain independently unconfirmed. That materially widens yesterday’s implant story (earlier coverage). Zero Day (discussion) · Supply Chain & Hardware Security · also via physical

October 14, 2026

• Ledger published its Donjon analysis of the implant, found in a signer sold by Southeast Asian reseller CryptoBilis: a hidden component whose microcontroller reads and decodes the 24-word recovery phrase off the screen during setup, then transmits it over LTE via a provisioned eSIM (CoinDesk). Losses linked to the implant are now put at $86 million (SecurityWeek). Ledger has told resellers across seven Southeast Asian markets to suspend sales, and MediaMarktSaturn pulled Ledger products from all its countries as a precaution (Cointelegraph) (earlier coverage). · Supply Chain
• Preinstalled firmware malware on low-cost MediaTek-based Android phones is turning devices into residential proxies and running covert app installs and ad fraud; Bitdefender tracks it as Midnight Mimosa (The Hacker News). · Threat Activity
• Norwegian military personnel found that rented Chinese-made cars automatically recorded and stored video during exercises — a vehicle-telemetry angle on operational security that applies well beyond Norway (Catalin Cimpanu). · Nordics & Europe

October 13, 2026

• Japan's National Cybersecurity Office issued a 9 October advisory after confirming multiple intrusions at organisations holding large volumes of personal data, naming web-system vulnerability exploitation, supply-chain compromise and poor data management as the paths in (NCO advisory, PDF). Karaoke operator Daiichi Kosho says 8,724,000 records — 8,631,000 customers and 93,000 employees — were at risk after malware was found on a single contractor PC at Nippon Columbia between 1–2 October (BleepingComputer). · Threat Intelligence

October 3, 2026

• Bitget attributes its $387.5M theft to a zero-day in third-party security products, citing SlowMist's ongoing investigation, which also recovered a customized tool used by the attacker (The Hacker News). · Breaches, Takedowns & Attribution

September 26, 2026

• Two compromised GitHub Actions came back online with the malicious tags still live. actions-cool/issues-helper and actions-cool/maintain-one-comment were backdoored on 18 May and disabled a day later; on 16 September GitHub re-enabled them without cleaning release tags, so mutable references like @v2.2.1 again resolved to the credential-stealing payload and any workflow not pinned to a commit SHA resumed executing it on its next run. Exfil to t.m-kosche[.]com ties it back to Mini Shai-Hulud. Both are disabled again (Socket, The Hacker News). · Cloud, CI/CD & Identity

September 22, 2026

• Jade Sleet (aka TraderTraitor, UNC4899) is tied by SentinelOne to the compromise of a small India-based IT services provider, using macOS backdoors FLATROOF (aka Gaslight) and ROOFDECK — both Rust-based, ARM macOS, and previously seen in the March–April 2026 KelpDAO/LayerZero bridge attack. The lure is a job-interview coding project whose weaponised .terraform.lock.hcl points at registry.hashicorp-aws[.]com, so a developer running terraform init pulls attacker-controlled modules. The Hacker News · Supply Chain & Developer Targeting

September 20, 2026

• CrowdSec disclosed on 18 September that an attacker copied roughly 170 of its private GitHub repositories on 22 May using the still-active account of an employee who had just left. The laptop was compromised in May's TanStack npm supply-chain attack, which stole credentials from developers — a clean illustration of offboarding lag turning a third-party package compromise into vendor source-code exposure. The Hacker News · Cloud, Identity & Supply Chain

September 5, 2026

• Coder's module registry was hijacked at the infrastructure layer — an attacker added unauthorised IPs to the Cloudflare origin pool serving registry.coder.com, so for 14 hours on 31 August a share of requests were served modified Terraform modules carrying credential-stealing scripts (Optimus Labs, SC World). No CVE to track: response is outbound-traffic hunting, log review, cache clearing, and credential rotation. · Supply Chain & Build Pipelines

August 31, 2026

• Popular AI coding assistants reportedly pulled suspicious code into corporate networks, per research covered by TechRadar naming Claude, Codex and Hermes tooling (TechRadar). Detail is thin, but agent-installed dependencies are an install-time supply-chain surface most software inventories do not cover. · AI & Model Security

August 22, 2026

• Terabytes of developer credentials and secrets are being traded following mass exposure tied to LiteLLM deployments, with the actor identified as TeamPCP and screenshots pointing at victims including Microsoft. Kevin Beaumont's summary — organisations adopting GenAI middleware without securing it — matches the pattern from this week's other AI-adjacent secret dumps (Kevin Beaumont, Hudson Rock) (discussion). · Cloud & Identity
• The French state hacking unit behind the EncroChat takedown used the 2017 "Bad Binder" Android exploit sourced from GitHub, a flaw left unpatched across an estimated 2.5 billion phones for two years, to take full control of tens of thousands of cryptophones (Computer Weekly). · Threat Activity

August 14, 2026

• DPRK-linked NullReceiver loaders found in infected GitHub repositories. The loaders decode Ethereum wallet recipient addresses as embedded IPv4 stages — reusing the C2 technique documented by OpenSourceMalware. (OpenSourceMalware) · Threat Activity
• The LiteLLM compromise is far larger than initially reported. New reporting from CloudSEK and Hudson Rock puts the blast radius at ~2,500 organizations — including Nvidia, AWS, and Samsung Electronics — with terabytes of credentials exfiltrated in a ~40-minute window and 434,000 CI/CD pipelines exposed (earlier coverage). Some commenters flagged it as possibly the largest credential compromise on record. (Ars Technica, discussion) · Supply Chain

August 12, 2026

• The BdThemes WordPress compromise is now understood as a JSON-poisoning attack (earlier coverage): attackers modified a remote JSON feed served to admins' browsers to create rogue admin accounts without touching any source files in the WordPress.org repo. All affected plugins remain pulled pending review (The Hacker News, BleepingComputer). · Supply Chain

August 9, 2026

• A supply-chain attack hit all BdThemes WordPress plugins through an API that pulls promo banners into the plugin backend from a compromised cloud bucket (Wordfence via campuscodi). · Vulnerabilities & Exploits
• TeamPCP traced back to Redis attacks since 2020, showing the group compromised internet-facing infrastructure for years before pivoting into software supply-chain campaigns, tied together by overlapping domains and staging techniques (The Hacker News). · Threat Activity

August 1, 2026

• Adform's analytics script was compromised to hijack cryptocurrency transactions, affecting sites including Finland's national lottery Veikkaus. The injected code rewrites clipboard contents and already-filled browser form fields to swap BTC, ETH, and TRON wallet addresses; Kevin Beaumont notes affected clients were only notified after he went public (BleepingComputer, GossiTheDog). · Threat Activity

July 31, 2026

• VaahCMS 2.0.0–2.3.4 (CVE-2026-67595) shipped malicious obfuscated JavaScript embedded in an OTP email template that phones home to a C2, logs passwords, scrapes WhatsApp Web, and can remotely alter pages — a backdoor in the product itself (commit). · Vulnerabilities & Exploits
• Adform, the Danish ad-tech firm, was compromised in a supply-chain attack that served a crypto-wallet stealer and C2 beacon traffic through its advertising network; the payload also rewrites already-filled browser forms to swap wallet addresses (DoublePulsar). (discussion) · Threat Activity

July 24, 2026

• A large GitHub Actions abuse campaign turned compromised repos into distributed infrastructure hitting cPanel and WHM. The malicious logic lived in workflow files (not the PHP code itself) across 10 Packagist packages tied to legit developer "dinushchathurya," auto-synced July 12–13. Socket, The Hacker News. · Supply Chain

July 19, 2026

• HelloNet campaign abuses the ViPNet update system for DLL sideloading — itcsrvup64.exe side-loading a malicious wtsapi32.dll to establish an SSH tunnel (@blackorbird). · Threat Activity
• npm supply-chain attackers exploited a gap in the CI/CD pipeline itself, with Unit 42 also observing an attacker leveraging GitHub Copilot to trigger infection (Unit 42). · Cloud, Identity & Supply Chain · also via ai agent

July 18, 2026

• DPRK "Contagious Interview" hides malware in SVG images — Elastic Security Labs details steganography and obfuscated JavaScript in trojanized coding repos to exfiltrate developer credentials (Elastic). · Threat Activity

July 15, 2026

• A coordinated attack abused a GitHub Actions misconfiguration to steal a privileged token and push malicious npm packages into AsyncAPI repos, delivering multi-stage malware for persistence and exfiltration; separately, three packages (solana-key-utils, crypto-validate-lib, eth-wallet-helpers) impersonate blockchain libraries to steal MetaMask, Phantom, Ledger and Trezor credentials. Wiz, Nextron IOCs, CERT-SE · Supply Chain · also via package registry

July 13, 2026

• IKEA Norway disclosed a breach exposing over 45,000 customer and employee records. Attackers accessed roughly 5,000 IKEA accounts in a GitHub development system via a third-party vulnerability, downloading 3,261 employees' data and 42,370 customers' names and addresses; the true scope may be larger (IS.fi). · Data Breaches

July 5, 2026

• FBI warns of TeamPCP supply-chain attacks on developer tools used to steal cloud credentials and deploy malware, urging tighter build-pipeline controls and monitoring. Security Affairs · Threat Activity

July 3, 2026

• Socket detailed PolinRider, a North Korea-linked supply-chain campaign compromising legitimate GitHub repos with malicious commits — often a one-line obfuscated JavaScript loader padded with whitespace to push it off-screen. Socket, blackorbird. · Threat Activity
• Sophos documented a 2026 partnership between Vect and TeamPCP abusing supply-chain attacks on security tooling for credential theft and ransomware. Sophos. · Threat Activity

June 27, 2026

• Polymarket customers lost ~$3M after attackers injected a malicious script into the platform's frontend via a breached third-party vendor; the company says it will reimburse losses. BleepingComputer · Threat Activity

June 24, 2026

• Cordyceps: malicious pull requests are spreading through CI/CD workflows across major projects including Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache Doris, Cloudflare's Workers SDK, and Python's Black. Dark Reading. · Supply Chain & Malware

June 23, 2026

• ShapedPlugin WordPress build pipeline backdoored — Wordfence reports attackers tampered with the vendor's official release channel to inject backdoor code into Pro plugin updates. The Hacker News · Threat Activity

June 21, 2026

• Klue, a competitive-intelligence platform, confirmed attackers stole OAuth tokens used to connect to customers' Salesforce environments, and the new Icarus extortion group has claimed it (BleepingComputer). Salesforce disabled the Klue Battlecards integration on June 11; this is the third Salesforce-connected app abused for CRM data theft, and confirmed victims include security vendors Huntress and Recorded Future (SecurityWeek, The Hacker News). · Cloud & Identity

June 20, 2026

• 145 Mastra npm packages (@mastra/*, a popular AI-app framework) were trojanized after a contributor account was hijacked, with easy-day-js@1.11.22 dropping a postinstall remote payload. Microsoft attributes the campaign to Sapphire Sleet (North Korea–nexus, lineage to the Axios/APT38 npm activity); Nextron flagged related infostealer packages whose Rust second stage hunts crypto seed phrases, .env/.npmrc/SSH keys, and enumerates SentinelOne, Defender, and Little Snitch on macOS. The Hacker News, Microsoft · Cloud, Identity & Supply Chain · also via package registry