Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the…
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
î „Ravie Lakshmananî ‚May 19, 2026Software Security / Malware In yet another software supply chain attack, threat actors have compromised the popular…
INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests
INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests…
Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
î „Ravie Lakshmananî ‚May 18, 2026Cybersecurity / Hacking Monday opens with a trust problem. A mail server flaw is under active use….
How to Reduce Phishing Exposure Before It Turns into Business Disruption
What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business…
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
î „Ravie Lakshmananî ‚May 18, 2026Vulnerability / Software Security Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities…
Developer Workstations Are Now Part of the Software Supply Chain
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the…
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
î „Ravie Lakshmananî ‚May 18, 2026Supply Chain Attack / Botnet Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one…
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
î „Ravie Lakshmananî ‚May 18, 2026Zero Day / Vulnerability Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and…
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations
î „Ravie Lakshmananî ‚May 18, 2026Industrial Sabotage / Malware A new analysis of the Lua-based fast16 malware has confirmed that it was…