All news with #supply chain compromise tag

🛡️ Google Threat Intelligence Group (GTIG) reports financially motivated and state-aligned actors are leveraging agentic AI and autonomous multi-agent frameworks to conduct rapid, large-scale credential harvesting and supply chain compromises. Teams like TeamPCP (aka Altered Spider) deploy credential stealers such as SANDCLOCK and DUSTMAKER to target developer tools, cloud environments, and AI assets. Adversaries also repurpose open-weight models and misappropriate proprietary AI research, increasing risks to enterprise AI deployments and prompting calls for industry safety baselines.

🔍 A Google Threat Intelligence Group (GTIG) report warns that AI-assisted coding tools have become a primary target for threat actors, contributing to large-scale software supply chain compromises in 2025–2026. GTIG highlights a financially motivated group, UNC6780, using Dustmaker malware to compromise PyPI, npm and Docker Hub packages, extract tokens from GitHub Actions runners, and hide malicious files in AI assistant workspaces. The report also describes espionage and extortion targeting proprietary AI research and models, and growing adversary experimentation with agentic AI to accelerate attacks.

📣 Trezor has revealed that a supply-chain breach at shipping partner ShipMonk exposed additional customer order data, expanding the impacted cohort by 67,000 users. The company updated its notification after discovering records from November 2019 to August 2021 were included, revising earlier timelines and increasing the victim count significantly. Trezor warned of heightened phishing and fraud risks and said it is considering legal action while pushing for anonymized delivery options.

🛡️ This week’s recap highlights active zero-days, credential‑stealing supply‑chain code, and novel attack vectors that bypass simple user precautions. Notable incidents include an actively exploited Chrome V8 zero-day, MikroTik RouterOS exploit chains dubbed "MikroTrick," and a Magento/Adobe Commerce zero-day called StyleSmuggler used to backdoor storefronts. The briefing summarizes patches, observed exploitation activity, and trending CVEs to prioritize.

🛡️ A previously undocumented Linux toolkit named ted was compiled into trojanized HAProxy binaries on two South Korean hosts, intercepting web traffic and serving altered pages to selected visitors. Rapid7 links the implant with medium confidence to North Korean state actors and identifies victims in the automotive and media sectors. The implant uses specially crafted requests to enter C2 mode, erases its activity from HAProxy counters and returns operator responses over ordinary HTTP headers. Rapid7 shared IoCs and recommended network correlation, memory analysis and binary integrity checks.

🔍 A large cache of 153 million digital driving-license scans and other ID documents was listed for sale on the dark web, traced to identity verification provider IDscan.net. The haul also included millions of ID cards, travel documents and medical cards, and affected high-profile individuals. IDscan.net has not issued a full public statement while an FBI investigation into the source of the images is underway, raising supply-chain security concerns for organizations that rely on third-party verification services.

🔍 Researchers scanned 6,214 live domains of defense contractors, Fortune 500, and Big Tech firms and found 8,265 llms.txt and llms-full.txt files. They registered several unclaimed package names referenced in those files and hosted payloads; within an hour a Fortune 500 system phone‑homed to their server, and dozens more followed. The chain of parent processes showed agent involvement from Claude, OpenAI’s Codex, and Nous Research’s Hermes, illustrating a broken trust model.

🔒 Coder disclosed that an attacker gained access to its Cloudflare-backed registry infrastructure and added unauthorized IPs that served a tampered copy of the project's package registry. Between 07:35 UTC and 21:45 UTC on August 31, some requests were routed to attacker-controlled servers that delivered modified Terraform modules containing credential-stealing code. The malicious modules searched for a wide range of secrets and exfiltrated data to a lookalike domain; Coder advises rotating affected secrets, examining logs, and purging cached packages prior to upgrading to patched releases.

🛡️ This ThreatsDay bulletin surveys recent campaigns exploiting trusted tools and social engineering, from Microsoft Teams vishing to resilient phishing-as-a-service kits. It highlights ransomware affiliate playbooks, signed-software sideloading, a large ID-theft marketplace, and supply-chain risks tied to llms.txt misconfigurations. The report also notes Dropbox disclosed ~5,000 account compromises linked to legacy Lenovo IDs.

🔒 Microsoft warns that attackers are compromising enterprises via counterfeit download sites imitating vendors like Microsoft Edge, Kaspersky, and Razer, delivering trojanized installers that establish persistence and weaken security. The campaign, tied to the public Silver Fox/Yinhu activity, uses look-alike domains and server-generated payloads whose hashes change on each download to evade file-based detection. Once executed, installers abuse legitimate Windows components and scheduled tasks to persist, modify Defender settings, and stage further payloads.

🔒 A critical authentication bypass in JFrog Artifactory (CVE-2026-82329) is being actively exploited, allowing unauthenticated attackers under default configuration to obtain administrative privileges. Threat actors were observed creating admin tokens and enumerating users, groups and credentials, prompting urgent advisories to upgrade affected self-hosted versions and fortify cloud instances. Organizations are urged to patch exposed systems, revoke potentially compromised tokens, inspect logs and verify artifact integrity to mitigate downstream risks.

🔔 The Cronos blockchain resumed trading after a rapid price-manipulation attack on the Tectonic lending platform allowed an attacker to borrow $74 million. The attacker inflated the TONIC token price by 100x within 20 minutes and used it as collateral; only about $6 million in ETH was withdrawn while the rest remained on Cronos. Cronos halted the chain, restored state to before the exploit, and resumed block production while investigations continue.

⚠️ This week’s recap highlights major disruptions and ongoing campaigns, from an FBI takedown of a Chinese proxy network to AI agents and supply-chain failures. Coverage includes router backdoors, chained PaperCut flaws, malware delivered via fake CAPTCHAs, and the evolving tactics of China-linked actors like Fire Ant. Patch and verify trusted infrastructure controls to reduce risk.

🔍 Researchers at Socket found a supply-chain campaign that turned 19 Chrome and Edge extensions into malware by acquiring or publishing updates to previously legitimate extensions. The attackers used automatic extension updates to push malicious JavaScript payloads that stole cryptocurrency, captured form input, hijacked active sessions, and exfiltrated social media access and browsing history. Several extensions had substantial user bases, underscoring the reach of the operation.

🛡️ Police in Australia have charged two men over alleged roles in TeamPCP, the gang behind the Shai‑Hulud worm that poisoned open source packages. The AFP, working with the FBI and WA Police, says the suspects — a 21‑year‑old and a 23‑year‑old — face multiple offences including data intrusion and unauthorised modification. Authorities attribute compromises at over 1,000 organisations and theft of more than 500,000 credentials and 300GB of data to the group.

📄 Threat actors are abusing npm packages and public mirrors to host malicious HTML that impersonates Cloudflare CAPTCHA pages and redirects visitors to attacker-controlled sites. Security researchers found multiple npm packages containing a single index.html that, when served through mirrors like unpkg, renders from legitimate domains and executes obfuscated JavaScript to redirect users. Some payloads fetch remote configuration (via api.keyval.org) allowing attackers to change redirect targets without republishing packages. OX Security warns mirrors can act as free frontend hosts for phishing content and recommends treating direct HTML requests to npm mirrors as suspicious.

🔍 Kaspersky researchers say a supply-chain attack abused a legitimate DoFun update app to deliver JarService malware to Android-based car head units, attributing the campaign to the MoYu group. The loader retrieves encrypted payloads and exposes nine remote commands used to collect device metadata, run code, open URLs, and perform network checks. Operators primarily install a reverse-proxy module named zhima to convert head units into proxy nodes for ad fraud and monetization, while DoFun says it has remediated the issue.

🔒 Wiz researchers linked a recent supply chain attack in the Rust ecosystem to state-sponsored North Korean actors. The campaign compromised maintainer accounts on crates.io to alter manifests and import a typosquatted dependency, allowing malicious build-time code to run during compilation. The backdoor aimed to harvest browser credentials, crypto wallets and developer secrets, affecting widely used crates including arrayref, internment and append-only-vec.

📣 Pokémon Center has notified UK and German customers that a third-party logistics provider, CEVA Logistics, suffered a cyberattack that exposed customer personal and order information. The breach affected CEVA systems between July 29 and August 1 and disrupted several European warehouses, causing shipping delays and cancellations. Pokémon Center says exposed data may include names, mailing addresses, phone numbers, email addresses, and order details, but not payment card information.

🔍 General Electric and Philips are investigating claims that the Clop ransomware gang breached their systems and stole data. Philips confirmed an attempted compromise of an internal enterprise server that has been contained and said there was no impact on customer environments. GE acknowledged awareness of the claim and is assessing the potential issue. The incidents are linked to Clop’s exploitation of a PTC Windchill and FlexPLM vulnerability (CVE-2026-12569) that has prompted emergency advisories and active threat confirmations.