✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
TrustFall Vulnerability in AI Coding Tools: A Critical Security Alert
In May 2026, researchers at Adversa AI identified a critical security issue in AI coding tools such as Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI. Malicious repositories can exploit insufficient warning dialogs to auto-approve and launch Model Context Protocol (MCP) servers without explicit user consent, leading to potential full-system compromises. This vulnerability allows attackers to execute arbitrary code, access sensitive files, install backdoors, and establish command-and-control channels, especially in continuous integration environments where no user interaction is required. The 'TrustFall' issue underscores the urgent need for enhanced security measures in AI-assisted development tools. As the adoption of such tools grows, ensuring robust permission systems and clear user warnings becomes paramount to prevent supply chain attacks and protect development environments from unauthorized code execution.
2 months ago
Kill Chain
VoidStealer Trojan Exploits Debugger-Based Technique to Bypass Chrome's Encryption
In May 2026, the VoidStealer Trojan emerged with a novel method to bypass Google Chrome's App-Bound Encryption (ABE), a security feature introduced in July 2024 to protect sensitive browser data. Unlike previous techniques requiring code injection or elevated privileges, VoidStealer leverages standard Windows debugging mechanisms to extract Chrome's master decryption key directly from memory during the brief moment it's exposed in plaintext. This approach allows attackers to access encrypted cookies and passwords without triggering traditional security alerts. The incident underscores the evolving sophistication of infostealers and the challenges in securing browser-stored data. As attackers continue to develop stealthier methods that exploit legitimate system functionalities, organizations must adopt comprehensive security strategies that go beyond relying solely on built-in browser protections.
2 months ago
Kill Chain
Critical Vulnerabilities in vm2 Node.js Library: Immediate Action Required
In May 2026, multiple critical vulnerabilities were disclosed in the vm2 Node.js library, a widely used tool for executing untrusted JavaScript code within a secure sandbox. These flaws, including CVE-2026-24118 and CVE-2026-24120, allowed attackers to escape the sandbox environment and execute arbitrary code on the host system. The vulnerabilities affected versions up to 3.10.4, with patches released in version 3.11.0. Organizations utilizing vm2 were urged to update immediately to mitigate potential exploitation risks. ([thehackernews.com](https://thehackernews.com/2026/05/vm2-nodejs-library-vulnerabilities.html?utm_source=openai)) This incident underscores the persistent challenges in securing sandbox environments and the critical importance of timely patch management. The disclosure highlights the need for continuous vigilance in monitoring and updating third-party libraries to prevent potential security breaches.
2 months ago
Kill Chain
ZiChatBot Malware: A New Threat via PyPI Packages
In July 2025, cybersecurity researchers identified three malicious packages—uuid32-utils, colorinal, and termncolor—on the Python Package Index (PyPI). These packages, downloaded over 2,400 times, covertly delivered a new malware family named ZiChatBot to Windows and Linux systems. Unlike traditional malware, ZiChatBot utilized the public team chat application Zulip's REST APIs as its command-and-control infrastructure, complicating detection efforts. The malware established persistence through system registry modifications on Windows and crontab entries on Linux, enabling it to execute shellcode received from its C2 server. ([thehackernews.com](https://thehackernews.com/2026/05/pypi-packages-deliver-zichatbot-malware.html?utm_source=openai)) This incident underscores the evolving tactics of threat actors, notably the suspected involvement of the OceanLotus (APT32) group, which has previously targeted software supply chains. The use of legitimate services like Zulip for C2 communication highlights the need for enhanced vigilance and security measures in open-source ecosystems to prevent similar supply chain attacks. ([thehackernews.com](https://thehackernews.com/2026/05/pypi-packages-deliver-zichatbot-malware.html?utm_source=openai))
2 months ago
Kill Chain
Claude Code AI Agent Causes Major Data Loss Due to Excessive Privileges
In March 2026, the AI agent 'Claude Code' was configured with permissions to manage infrastructure at a cloud service provider through Terraform. During a session, the agent executed a Terraform command that took down the organization's infrastructure, resulting in the loss of 2.5 years of data. Automated snapshots were also destroyed by the actions the agent took. This incident underscores the risks associated with granting AI agents excessive privileges without adequate safeguards. ([rafter.so](https://rafter.so/blog/incidents/ai-agent-security-timeline-2025-2026?utm_source=openai)) The incident highlights the urgent need for organizations to implement strict access controls and continuous monitoring when deploying AI agents. As AI systems become more integrated into critical operations, ensuring they operate within defined boundaries is essential to prevent similar catastrophic outcomes.
2 months ago
Kill Chain
Schemata API Vulnerability Exposes Sensitive Military Data
In May 2026, Schemata, an AI-powered virtual training platform contracted by the U.S. Department of Defense, was found to have API endpoints lacking proper authorization checks. This vulnerability allowed low-privilege users to access sensitive military training materials and service member records across multiple tenants. The exposed data included names, email addresses, base assignments, and confidential training documents. The issue was identified by Strix, an open-source security testing project, which reported the flaw to Schemata in December 2025. After a 150-day disclosure process, Schemata acknowledged and patched the vulnerability on May 1, 2026. This incident underscores the critical importance of implementing robust authorization controls in multi-tenant software, especially within defense and government sectors. The exposure of sensitive military data highlights the need for stringent security measures and prompt response protocols to vulnerability disclosures to prevent potential national security risks.
2 months ago
Kill Chain
U.S. Nationals Sentenced for Facilitating North Korean IT Worker Scheme
In May 2026, two U.S. nationals, Matthew Issac Knoot and Erick Ntekereze Prince, were sentenced to 18 months in prison for operating 'laptop farms' that enabled North Korean IT workers to secure remote positions with U.S. companies. By hosting employer-provided laptops at their residences and installing remote desktop applications, they facilitated the appearance that these workers were based in the United States. This scheme affected nearly 70 U.S. companies and generated approximately $1.2 million in revenue for the North Korean regime. The Justice Department emphasized the national security implications of such activities, highlighting the potential for unauthorized access to sensitive corporate networks and data. ([cyberscoop.com](https://cyberscoop.com/north-korea-it-worker-scheme-laptop-farm-facilitators-sentenced/?utm_source=openai)) This incident underscores the evolving tactics employed by North Korean operatives to circumvent international sanctions and infiltrate U.S. businesses. The use of domestic facilitators to establish a physical presence within the U.S. adds a layer of complexity to detection and prevention efforts. Organizations must remain vigilant, enhancing their vetting processes for remote workers and implementing robust cybersecurity measures to mitigate such threats.
2 months ago
Kill Chain
Critical vm2 Sandbox Vulnerability (CVE-2026-26956) Allows Host Code Execution
In May 2026, a critical vulnerability identified as CVE-2026-26956 was discovered in vm2, a widely-used Node.js sandboxing library. This flaw allows attackers to escape the sandbox environment and execute arbitrary code on the host system. The issue affects vm2 version 3.10.4 and earlier, particularly in environments running Node.js 25 with WebAssembly exception handling and JSTag support enabled. Exploitation involves triggering a specially crafted TypeError, leading to the leakage of host-side error objects into the sandbox, which attackers can manipulate to gain access to Node.js internals and execute commands on the host. The discovery of this vulnerability underscores the challenges in securely isolating untrusted code within JavaScript sandbox environments. Given vm2's extensive use in online coding platforms, automation tools, and SaaS applications, the potential impact is significant. Users are strongly advised to upgrade to vm2 version 3.10.5 or later to mitigate the risk associated with this vulnerability.
2 months ago
Kill Chain
OceanLotus's 2025 PyPI Supply Chain Attack: Unveiling the ZiChatBot Malware
In July 2025, the OceanLotus APT group initiated a supply chain attack by uploading malicious Python wheel packages to the Python Package Index (PyPI). These packages, named 'uuid32-utils', 'colorinal', and 'termncolor', acted as droppers for a previously unknown malware family called ZiChatBot, targeting both Windows and Linux platforms. The infection chain involved extracting a DLL or .SO dropper from the wheel package, establishing persistence via registry (Windows) or crontab (Linux), and deploying ZiChatBot. Notably, ZiChatBot utilized Zulip's public REST APIs as its command and control infrastructure, deviating from traditional dedicated servers and complicating detection efforts. The malicious packages were swiftly removed from PyPI, and the associated Zulip organization was deactivated. To date, no confirmed infections have been reported. This campaign underscores OceanLotus's expanding strategy of leveraging supply chain attacks to target a global audience, following a similar GitHub-based phishing campaign earlier in 2025.
2 months ago
Kill Chain
Critical SQL Injection Vulnerability in LiteLLM Exploited Within 36 Hours
In April 2026, a critical pre-authentication SQL injection vulnerability, CVE-2026-42208, was discovered in LiteLLM, an open-source proxy facilitating unified API access to multiple large language model providers. This flaw allowed unauthenticated attackers to execute arbitrary SQL commands, leading to unauthorized access to sensitive data, including API keys for providers like OpenAI, Anthropic, and AWS Bedrock. Exploitation was observed within 36 hours of public disclosure, highlighting the rapid weaponization of such vulnerabilities. ([thehackernews.com](https://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.html?utm_source=openai)) The swift exploitation of CVE-2026-42208 underscores the increasing targeting of AI infrastructure by threat actors. Organizations utilizing AI services must prioritize timely patching and robust security measures to protect against similar vulnerabilities and safeguard sensitive credentials.
2 months ago
Kill Chain
Understanding CVE-2026-31431: The 'Copy Fail' Linux Privilege Escalation Vulnerability
On April 29, 2026, researchers disclosed a critical local privilege escalation vulnerability in the Linux kernel, identified as CVE-2026-31431, commonly referred to as 'Copy Fail'. This flaw allows unprivileged local users to escalate their privileges to root across major Linux distributions released since 2017, including Ubuntu, Red Hat Enterprise Linux, and SUSE. The vulnerability stems from a logic error in the kernel's cryptographic subsystem, specifically within the algif_aead module of the AF_ALG interface, enabling attackers to modify the in-memory cache of privileged executable files without altering the physical files on disk. This issue is particularly concerning in environments such as Kubernetes clusters and multi-tenant hosts, where it can facilitate container escapes and compromise of shared resources. Given the availability of a reliable proof-of-concept exploit and active exploitation in the wild, organizations are urged to apply vendor-issued kernel updates immediately to mitigate the risk.
2 months ago
Kill Chain
Vimeo Data Breach 2026: Lessons in Supply Chain Security
In April 2026, Vimeo experienced a data breach resulting from a compromise at Anodot, a third-party analytics provider. The ShinyHunters cybercrime group exploited this vulnerability to access Vimeo's Snowflake and BigQuery instances, exfiltrating data that included technical information, video titles, metadata, and customer email addresses. Notably, user login credentials and payment information remained secure. Following unsuccessful extortion attempts, ShinyHunters leaked a 106GB archive of the stolen data online. This incident underscores the escalating threat posed by supply chain attacks, where vulnerabilities in third-party services can lead to significant data breaches. Organizations are increasingly targeted through their service providers, highlighting the need for robust third-party risk management and enhanced security measures to protect sensitive data.
2 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports