9 casos · pág. 1/1
Wiz describes a supply chain detection pipeline that analyzes new npm package versions at publication, so malicious releases can be flagged before a CVE or advisory exists. Wiz Research says notable supply chain attacks rose from about 10% of significant incidents in H2 2025 to 25% in H1 2026. The article cites two compromises: the Axios …
The curl project will handle low- and medium-severity vulnerability reports publicly on its GitHub repository from October 26, reserving private handling for high and critical flaws. Maintainer Daniel Stenberg attributes the change to an "avalanche" of vulnerability reports, largely AI-assisted, that has left key maintainers overloaded. T…
SmartLoader is a commodity loader in active deployment, attributed to Malware-as-a-Service infrastructure linked to LummaStealer delivery in recent campaigns. Reverse engineering shows it is built almost entirely from off-the-shelf parts: a stock signed LuaJIT 2.1.0-beta3 interpreter, a commercial Lua VM obfuscator from the game-cheat sce…
Microsoft has warned that AI agents with access to enterprise systems can be manipulated through prompt injection, compromised inputs or shifts in task context. Agents do not need malicious intent to cause harm: their ability to read corporate data, invoke tools, approve transactions and talk to other agents widens exposure once untrusted…
SafeDep reports a growing npm campaign in which forks of Baileys, the WhatsApp Web library for Node.js, abuse the installer's authenticated WhatsApp session to silently follow attacker-controlled channels. Confirmed malicious packages total 82 Baileys-based package names (375 versions) and 15 libsignal-node impersonators (38 versions), ou…
AI pen-testing startup Terra Security reports a sharp rise in security fixes later found to be bypassed or incomplete. The share of GitHub security fixes needing a follow-up advisory for a failed patch within 90 days held near 0.2% from 2019 to 2025 but jumped to 2.3% in 2026. Terra links the trend to the 2026 explosion in AI-driven vulne…
Unit 42 analyzed how AWS neutralizes publicly exposed IAM access keys by automatically attaching the AWSCompromisedKeyQuarantine managed policy, and how that policy has changed since its release on Aug. 11, 2020. The mechanism relies on the GitHub secret scanning partner program, which alerts AWS when long-term keys appear in public repos…
Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…
A Hacktron researcher argues that AI-assisted vulnerability research is rapidly widening the enterprise attack surface. He cites recent breaches at Vercel and GitHub and a wave of critical CVEs in F5, Fortinet, Cisco, Palo Alto and ImageMagick. According to the author, the Vercel compromise began with a breach of the AI platform Context.a…
