✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
Malicious Wallpapers on Steam Workshop Compromise User Accounts
In late 2025, a significant malware campaign was identified targeting users of Steam's Workshop, particularly through the Wallpaper Engine application. Attackers embedded malicious code within shared wallpaper packages, exploiting the application's feature that allows users to set animated wallpapers. Upon installation, these compromised wallpapers deployed malware capable of hijacking Steam accounts, installing backdoors, or deploying cryptocurrency miners. The primary targets were gamers in China and Russia, with additional victims in Singapore, Hong Kong, Germany, Vietnam, India, and Canada. This campaign underscores the vulnerabilities inherent in user-generated content platforms and the need for vigilant security practices. The incident highlights a growing trend where cybercriminals exploit trusted platforms to distribute malware, leveraging user-generated content as a vector. This approach not only increases the reach of malicious campaigns but also complicates detection and mitigation efforts. As user-generated content continues to proliferate across various platforms, the importance of robust security measures and user awareness becomes increasingly critical.
1 month ago
Kill Chain
Critical Vulnerability in Google Vertex AI SDK: 'Pickle in the Middle' Attack Exposed
In March 2026, a critical vulnerability was discovered in the Google Cloud Vertex AI SDK for Python, allowing attackers to hijack machine learning model uploads via a technique known as 'bucket squatting.' By preemptively creating Cloud Storage buckets with predictable names derived from a victim's project ID and region, attackers could intercept model uploads and execute arbitrary code within Google's serving infrastructure. This flaw, identified by Palo Alto Networks Unit 42 and termed 'Pickle in the Middle,' was patched by Google in April 2026 with the release of SDK version 1.148.0. Organizations using affected versions are urged to update immediately to mitigate potential risks. ([unit42.paloaltonetworks.com](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/?utm_source=openai)) This incident underscores the critical importance of securing cloud-based machine learning workflows against supply chain attacks. As AI adoption accelerates, ensuring the integrity of model deployment processes becomes paramount to prevent unauthorized code execution and data breaches.
1 month ago
Kill Chain
New Malware Loaders Deployed in ClickFix Campaigns via Fake Updates
In June 2026, cybersecurity researchers identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns utilized fake software update lures to infiltrate systems, primarily targeting the education and financial sectors. The attackers' methods included sophisticated social engineering tactics to deceive users into executing malicious payloads, leading to unauthorized access and potential data exfiltration. This incident underscores a growing trend of threat actors employing novel malware delivery mechanisms and deceptive tactics to compromise organizations. The emergence of these loaders highlights the need for enhanced vigilance and adaptive security measures to counter evolving cyber threats.
1 month ago
Kill Chain
'Lorem Ipsum' Malware Shifts to ClickFix Delivery in 2026
In May 2026, the operators of the 'Lorem Ipsum' malware campaign transitioned from using Trojanized Microsoft Teams installers to employing ClickFix lures hosted on compromised WordPress sites. This shift followed Microsoft's takedown of the Fox Tempest infrastructure, which had previously supplied the attackers with fraudulent Microsoft Trusted Signing certificates. The new delivery method involves fake browser update notifications that prompt users to execute malicious PowerShell commands, leading to the silent installation of the malware. This change significantly broadens the potential victim pool, as any visitor to the compromised sites is now at risk. The 'Lorem Ipsum' campaign is now believed to be linked to the Vice Society ransomware group, also known as Rapid Brigantine or Vanilla Tempest. Vice Society has a history of targeting sectors such as education, healthcare, and manufacturing, employing double extortion tactics by encrypting data and threatening to leak it unless a ransom is paid. The group's ability to rapidly adapt its delivery methods in response to disruptions underscores the evolving nature of cyber threats and the importance of robust, adaptive cybersecurity measures.
1 month ago
Kill Chain
Understanding the 'SearchLeak' Vulnerability in Microsoft 365 Copilot (CVE-2026-42824)
In June 2026, a critical vulnerability known as 'SearchLeak' (CVE-2026-42824) was discovered in Microsoft 365 Copilot. This flaw allowed attackers to craft malicious links that, when accessed by a user, could exfiltrate sensitive data such as emails, meeting notes, and documents from OneDrive and SharePoint. The attack exploited a parameter-to-prompt injection (P2P) technique, enabling unauthorized data disclosure over the network. Microsoft promptly addressed the issue by releasing a patch to mitigate the vulnerability. The 'SearchLeak' incident underscores the evolving nature of AI-driven cyber threats, particularly those targeting large language model (LLM) systems integrated into enterprise environments. It highlights the necessity for organizations to implement robust security measures, including prompt isolation and output sanitization, to protect against sophisticated prompt-injection attacks.
1 month ago
Kill Chain
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
In May 2026, a critical vulnerability (CVE-2026-54420) was identified in the LiteSpeed cPanel Plugin versions prior to 2.4.8, allowing users with FTP or web shell access to escalate privileges to root on shared hosting servers running CloudLinux or CageFS. This flaw, resulting from improper handling of symbolic links, was actively exploited in the wild, prompting the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to add it to its Known Exploited Vulnerabilities catalog on June 15, 2026. Administrators were urged to upgrade to LiteSpeed WHM Plugin v5.3.2.1 or later to mitigate the risk. ([nvd.nist.gov](https://nvd.nist.gov/vuln/detail/CVE-2026-54420?utm_source=openai)) The incident underscores the persistent threat posed by privilege escalation vulnerabilities in widely used web hosting environments. It highlights the importance of timely patch management and vigilant monitoring to prevent unauthorized access and potential system compromise.
1 month ago
Kill Chain
ShinyHunters Breach Infinite Campus: 137,000 School Staff Accounts Exposed
In March 2026, the ShinyHunters extortion group infiltrated Infinite Campus's Salesforce instance, compromising personal information of over 137,000 school staff members. The stolen data included names, email addresses, phone numbers, physical addresses, and support tickets. Infinite Campus, a leading EdTech provider serving over 3,200 school districts across the United States, confirmed the breach but stated that the majority of the exposed information was publicly available directory data. This incident underscores the escalating trend of cybercriminals targeting educational institutions and their service providers. The breach highlights the critical need for robust security measures and vigilant monitoring of third-party platforms to safeguard sensitive information in the education sector.
1 month ago
Kill Chain
OptinMonster WordPress Plugin Hacked in CDN Supply-Chain Attack
In June 2026, a supply-chain attack targeted WordPress plugins OptinMonster, TrustPulse, and PushEngage, all managed by Awesome Motive. Attackers exploited a vulnerability in the UpdraftPlus plugin to access Awesome Motive's marketing server, obtaining credentials for their content delivery network (CDN). They then injected malicious JavaScript into CDN-hosted files, which, when loaded by websites using these plugins, created rogue administrator accounts and installed backdoor plugins, granting full control over the compromised sites. This incident underscores the critical need for robust security measures in third-party integrations and highlights the growing trend of supply-chain attacks targeting widely-used software components.
1 month ago
Kill Chain
North Korean Hackers Exploit Developer Tools in Sophisticated Phishing Campaign
In early 2026, a North Korean state-sponsored threat actor, identified as UNK_DeadDrop, launched a sophisticated phishing campaign targeting software developers across nearly 100 organizations, primarily in the United States. The attackers sent over 250 emails between April and May, masquerading as recruitment offers or code review requests. These emails directed recipients to clone malicious GitHub or GitLab repositories, which, when opened in code editors like Visual Studio Code, executed embedded malware. This approach enabled the attackers to steal cryptocurrency wallets and sensitive developer credentials. ([theregister.com](https://www.theregister.com/security/2026/06/08/suspected-norks-send-250-fake-dev-job-pitches-to-steal-crypto/5252526?utm_source=openai)) This incident underscores a significant evolution in cyberattack methodologies, where adversaries exploit trusted developer tools and workflows to deliver malware. The campaign's scale and sophistication highlight the increasing targeting of the tech industry by state-sponsored actors, emphasizing the need for heightened vigilance and robust security measures within development environments. ([microsoft.com](https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/?utm_source=openai))
1 month ago
Kill Chain
Critical LiteLLM Vulnerabilities Expose AI Gateways to Unauthenticated RCE
In May 2026, a critical vulnerability chain was discovered in LiteLLM, an open-source AI gateway widely used to interface with over 100 large language model providers. The primary flaw, CVE-2026-42271, is a command injection vulnerability affecting versions 1.74.2 through 1.83.6. This vulnerability allows authenticated users, including those with low-privilege internal-user keys, to execute arbitrary commands on the host system by exploiting two Model Context Protocol (MCP) test endpoints. When combined with CVE-2026-48710, an authentication bypass in the Starlette web framework, attackers can achieve unauthenticated remote code execution, granting them full control over the server. This chain of vulnerabilities exposes sensitive API keys and secrets stored by the proxy, potentially compromising connected AI systems and enabling lateral movement within enterprise networks. The active exploitation of these vulnerabilities underscores the increasing targeting of AI gateway infrastructures by threat actors. Organizations relying on LiteLLM are urged to upgrade to version 1.83.7 or later, which addresses these issues by implementing stricter authorization controls and updating dependencies. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-42271 to its Known Exploited Vulnerabilities catalog, emphasizing the urgency for immediate remediation to prevent potential breaches and data exfiltration.
1 month ago
Kill Chain
U.S. Government Restricts Access to Anthropic's Advanced AI Models
In June 2026, the U.S. government issued an export control directive requiring Anthropic to suspend access to its advanced AI models, Fable 5 and Mythos 5, for all foreign nationals, including those within the United States. This action was taken due to national security concerns over potential vulnerabilities that could allow the models to be exploited for identifying software flaws. As a result, Anthropic disabled these models for all users to ensure compliance. This unprecedented move underscores the growing tension between technological advancement and national security, highlighting the challenges in regulating AI technologies. The directive has sparked international debate over the balance between innovation and security, with European leaders expressing concerns about overreliance on American AI providers and advocating for greater technological sovereignty.
1 month ago
Kill Chain
Massive WordPress Plugin Supply Chain Attack Exposes Over 1.2 Million Sites
In June 2026, a sophisticated supply chain attack targeted WordPress sites utilizing the PushEngage, OptinMonster, and TrustPulse plugins. Malicious actors tampered with JavaScript files served by these plugins, embedding code that, when loaded by a logged-in administrator, created unauthorized admin accounts and installed concealed backdoors. This breach potentially compromised over 1.2 million websites, granting attackers full control to exfiltrate data, deploy malware, or manipulate site content. The attack was active for varying durations across the plugins, with OptinMonster and TrustPulse affected for approximately 25 minutes on June 12, while PushEngage's exposure extended over several hours into June 14. This incident underscores the escalating threat of supply chain attacks within the WordPress ecosystem, highlighting the critical need for vigilant monitoring of third-party plugins and the implementation of robust security measures to detect and mitigate unauthorized code modifications.
1 month ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports