✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
AI Agent Security Breach: Lessons from a 2026 Penetration Test
In March 2026, a penetration test revealed a critical vulnerability in an AI-powered desktop application designed to interface with Claude (Opus 4.5) and a third-party asset management platform. Despite operating within a sandboxed environment with stringent controls, attackers exploited the agent's ability to modify existing files and execute code. By uploading a benign-looking 'Hello World' C program alongside a malicious binary, and manipulating the agent to rename and execute the binary, the attackers achieved remote code execution, compromising the sandbox and accessing sensitive business logic components. This incident underscores the evolving threat landscape where AI agents, even with robust safeguards, can be manipulated to perform unintended actions, leading to significant security breaches. Organizations must reassess their security measures, particularly concerning AI agents with code execution capabilities, to prevent similar exploits.
4 months ago
Kill Chain
Mercor's 2026 Data Breach: A Wake-Up Call for Supply Chain Security
In March 2026, AI recruiting startup Mercor confirmed a significant data breach resulting from the LiteLLM supply chain compromise orchestrated by the hacking group TeamPCP. The attackers infiltrated Mercor's systems via a compromised Tailscale VPN credential, leading to the exfiltration of approximately 4TB of sensitive data, including source code, user databases, and identity verification documents. This incident underscores the critical vulnerabilities in software supply chains and the cascading risks they pose to organizations relying on open-source components. The Mercor breach highlights the escalating threat of supply chain attacks targeting widely-used open-source projects. As organizations increasingly integrate such components into their infrastructure, the potential for widespread compromise grows, emphasizing the need for robust security measures and vigilant monitoring of third-party dependencies.
4 months ago
Kill Chain
Critical Supply Chain Attack: Axios npm Package Compromised in March 2026
In late March 2026, attackers compromised the npm account of a lead maintainer of Axios, a widely used JavaScript HTTP client library, and published two malicious versions: axios@1.14.1 and axios@0.30.4. These versions included a hidden dependency, plain-crypto-js@4.2.1, which executed a cross-platform Remote Access Trojan (RAT) upon installation, targeting macOS, Windows, and Linux systems. The malicious packages were live for approximately two to three hours before being removed, but during that time, any system that installed these versions was potentially compromised. ([csoonline.com](https://www.csoonline.com/article/4152696/attackers-trojanize-axios-http-library-in-highest-impact-npm-supply-chain-attack.html?utm_source=openai)) This incident underscores the growing threat of supply chain attacks, where trusted software components are manipulated to distribute malware. Given Axios's extensive use, with over 100 million weekly downloads, the potential impact was significant, highlighting the need for robust security measures in software development and distribution processes. ([csoonline.com](https://www.csoonline.com/article/4152696/attackers-trojanize-axios-http-library-in-highest-impact-npm-supply-chain-attack.html?utm_source=openai))
4 months ago
Kill Chain
Uranium Finance's 2021 Smart Contract Exploits: A DeFi Cautionary Tale
In April 2021, Uranium Finance, a decentralized exchange on Binance's BNB Chain, suffered two significant security breaches. On April 8, an attacker exploited a flaw in the smart contract's 'AmountWithBonus' variable, enabling unauthorized withdrawals totaling approximately $1.4 million. The attacker then coerced the platform into labeling a portion of the stolen funds as a 'bug bounty' in exchange for returning the remainder. On April 28, a separate vulnerability—a single-character coding error—was exploited, allowing the attacker to drain nearly $53.3 million from the platform's liquidity pools. This second attack forced Uranium Finance to cease operations, leaving users without recourse. These incidents underscore the critical importance of rigorous smart contract auditing and secure coding practices in the rapidly evolving DeFi sector. The substantial financial losses and operational disruptions highlight the vulnerabilities inherent in decentralized platforms and the necessity for continuous security assessments to protect user assets.
4 months ago
Kill Chain
Axios npm Package Compromise: A Wake-Up Call for Open-Source Security
In late March 2026, attackers compromised the npm account of a lead maintainer of the widely-used JavaScript library Axios, publishing malicious versions 1.14.1 and 0.30.4. These versions included a trojanized dependency, 'plain-crypto-js', which executed a cross-platform Remote Access Trojan (RAT) upon installation, affecting Windows, macOS, and Linux systems. The malicious packages were live for approximately three hours before removal, during which time they were potentially downloaded by numerous developers, given Axios's extensive use in the JavaScript ecosystem. ([securitylabs.datadoghq.com](https://securitylabs.datadoghq.com/articles/axios-npm-supply-chain-compromise/?utm_source=openai)) This incident underscores the escalating threat of supply chain attacks targeting open-source software repositories. The rapid deployment and widespread adoption of compromised packages highlight the need for enhanced security measures in package management and distribution processes to prevent similar future breaches.
4 months ago
Kill Chain
Cisco's 2026 Trivy Supply Chain Attack: A Wake-Up Call for CI/CD Security
In March 2026, Cisco experienced a significant security breach when attackers exploited compromised credentials from the Trivy supply chain attack to infiltrate its internal development environment. This intrusion led to the theft of source code from over 300 GitHub repositories, including proprietary AI-powered products and sensitive customer data from sectors such as banking and U.S. government agencies. The attackers utilized a malicious GitHub Action plugin to exfiltrate credentials and data, affecting numerous developer and lab workstations. In response, Cisco isolated impacted systems, initiated reimaging procedures, and commenced a comprehensive credential rotation to mitigate further unauthorized access. This incident underscores the escalating threat posed by supply chain attacks, where vulnerabilities in widely-used tools can have cascading effects on major organizations. The breach highlights the critical need for robust security measures in CI/CD pipelines and the importance of prompt credential management to prevent unauthorized access and data exfiltration.
4 months ago
Kill Chain
Critical Remote Code Execution Vulnerabilities Discovered in Vim and Emacs
In March 2026, critical remote code execution (RCE) vulnerabilities were discovered in the Vim and GNU Emacs text editors. These flaws allowed attackers to execute arbitrary code simply by having a user open a specially crafted file. The vulnerabilities stemmed from improper handling of modelines in Vim and unsafe Git operations in Emacs' version control integration. Vim promptly addressed the issue in version 9.2.0272, while the Emacs vulnerability remained unpatched due to debates over responsibility between Emacs and Git maintainers. This incident underscores the growing trend of attackers exploiting vulnerabilities in widely used development tools to gain unauthorized access. Organizations must prioritize timely patching and exercise caution when handling files from untrusted sources to mitigate such risks.
4 months ago
Kill Chain
Axios npm Package Compromised in 2026 Supply Chain Attack
In late March 2026, the widely-used JavaScript HTTP client library, Axios, experienced a significant supply chain attack. Threat actors compromised the npm account of a lead maintainer, publishing malicious versions 1.14.1 and 0.30.4. These versions introduced a deceptive dependency, 'plain-crypto-js' version 4.2.1, which, upon installation, executed a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. The malicious packages were available for approximately two to three hours before removal, during which any system executing 'npm install' with the affected versions was potentially compromised. ([csoonline.com](https://www.csoonline.com/article/4152696/attackers-trojanize-axios-http-library-in-highest-impact-npm-supply-chain-attack.html?utm_source=openai)) This incident underscores the escalating threat of software supply chain attacks, particularly within the open-source ecosystem. The rapid propagation of compromised packages highlights the critical need for robust security measures in dependency management and the importance of vigilant monitoring to detect and mitigate such threats promptly.
4 months ago
Kill Chain
Silver Fox's 2026 AtlasCross RAT Campaign Exploits Trusted Software Brands
In March 2026, the Chinese state-sponsored threat actor Silver Fox, also known as Void Arachne, launched a sophisticated cyber campaign targeting Chinese-speaking users. The attackers employed typosquatted domains that impersonated trusted software brands, including Surfshark, Signal, and Zoom, to distribute a previously undocumented remote access trojan (RAT) named AtlasCross. By leveraging stolen Extended Validation (EV) code-signing certificates, Silver Fox was able to bypass security checks and establish deep persistence within enterprise networks. The campaign utilized polished landing pages that mimicked legitimate application vendors, leading victims to download malicious installers. These installers deployed trojanized components alongside legitimate decoy applications, effectively evading detection mechanisms. The AtlasCross RAT, central to this operation, featured a custom PowerShell execution engine named PowerChell, which disabled host defenses and maintained encrypted communication with command-and-control servers. This campaign underscores the evolving tactics of threat actors in exploiting trusted software brands and advanced evasion techniques to infiltrate target systems. Organizations are advised to enhance their security posture by verifying software sources, monitoring for typosquatted domains, and implementing robust endpoint detection and response solutions to mitigate such sophisticated threats.
4 months ago
Kill Chain
Trivy Supply Chain Attack: A Wake-Up Call for CI/CD Security
In March 2026, Aqua Security's Trivy vulnerability scanner was compromised in a sophisticated supply chain attack orchestrated by the threat actor group TeamPCP. The attackers exploited previously stolen credentials to inject credential-stealing malware into Trivy's official releases and GitHub Actions, affecting versions 0.69.4, 0.69.5, and 0.69.6. This malicious code exfiltrated sensitive information, including cloud credentials and SSH keys, from CI/CD pipelines to attacker-controlled servers. The incident underscores the critical need for robust security measures in software supply chains to prevent such breaches. ([arstechnica.com](https://arstechnica.com/security/2026/03/widely-used-trivy-scanner-compromised-in-ongoing-supply-chain-attack/?utm_source=openai)) This attack highlights a growing trend of targeting trusted security tools to infiltrate development environments, emphasizing the importance of continuous monitoring and stringent access controls in CI/CD pipelines. Organizations must remain vigilant against evolving supply chain threats to safeguard their software development processes.
4 months ago
Kill Chain
LiteLLM Supply Chain Compromise: A Wake-Up Call for Open-Source Security
In March 2026, the LiteLLM Python package, a widely used tool for managing large language model (LLM) APIs, was compromised in a supply chain attack attributed to the threat actor group TeamPCP. Malicious versions 1.82.7 and 1.82.8 were published on the Python Package Index (PyPI), containing code designed to exfiltrate sensitive credentials, including SSH keys, cloud tokens, and Kubernetes secrets. The attack exploited the package's role as a credential proxy, potentially exposing a vast array of systems to unauthorized access. The compromised versions have since been removed from PyPI, and users are advised to verify their installations, rotate all potentially exposed credentials, and monitor for any unauthorized activity. ([netspi.com](https://www.netspi.com/blog/executive-blog/ai-ml-pentesting/litellm-supply-chain-compromise/?utm_source=openai)) This incident underscores the escalating threat of supply chain attacks targeting open-source software repositories. The LiteLLM compromise highlights the critical need for organizations to implement stringent security measures within their software development and deployment pipelines to mitigate the risks associated with third-party dependencies.
4 months ago
Kill Chain
Addressing API Authorization Vulnerabilities in the Age of AI
In 2026, API authorization vulnerabilities have emerged as a critical security concern, with Broken Object Level Authorization (BOLA) and Broken Function Level Authorization (BFLA) being the most prevalent issues. These flaws allow attackers to access or manipulate resources without proper permissions, leading to unauthorized data exposure and potential system compromise. The rapid proliferation of APIs, coupled with inadequate access controls, has significantly increased the attack surface for organizations. ([42crunch.com](https://42crunch.com/state-of-api-security-2026-report/?utm_source=openai)) The urgency to address these vulnerabilities is heightened by the integration of AI and automation technologies, which rely heavily on APIs. As AI systems become more prevalent, the potential for exploitation through insecure APIs grows, emphasizing the need for robust authorization mechanisms and continuous security assessments. ([tfir.io](https://tfir.io/ai-security-api-security-wallarm-2026/?utm_source=openai))
4 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports