Reporting on software supply chain attacks, compromised update servers, malicious packages, and third-party risk — the fastest-growing attack vector in enterprise cybersecurity.
Phishing
+5
May 3, 2026
•
5 min read
GitHub cross-tenant RCE via git push, SAP npm backdoored in Mini Shai-Hulud, 276 pig-butchering arrests, 30K Facebook accounts phished via Google, and LiteLLM exploited in 36 hours.
Daily Briefing
+3
May 1, 2026
Iran doxxed Marines. ShinyHunters claimed 9.4M Amtrak records. A 15-year-old breached France's ID agency. $725M in cargo theft. PyTorch Lightning backdoored.
+6
Apr 30, 2026
6 min read
BlueNoroff hid a 66-day fileless implant behind AI Zoom deepfakes. WordPress plugins backdoored for 8 months via blockchain C2. APT28 patch was incomplete — zero-click flaw now actively exploited.
Ransomware
Apr 28, 2026
ShinyHunters claims 9M Medtronic records. A PyPI package with 1.1M monthly downloads pushes infostealer via CI/CD. North Korea targets macOS. 10,500 Zimbra servers exposed. AI engine exploited in 12 hours.
+4
Apr 20, 2026
4 min read
ShinyHunters targets Zara, Carnival, and 7-Eleven with 9M records at stake. Microsoft Teams weaponized for helpdesk fraud. Standard Bank leaking 1.2TB daily. Vercel confirms AI supply chain breach.
Apr 14, 2026
Ransomware groups are now disabling your endpoint security before striking. Plus Booking.com data exposed, Anodot breach spreads, and 4 missed stories.
Surveillance
Apr 13, 2026
Adobe's zero-day ran for months. Rockstar's ransom deadline hits tomorrow. And 500M devices are being tracked through their own ads.