✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
OpenClaw 2026: A Cautionary Tale of AI Assistant Security
In early 2026, the OpenClaw AI assistant platform, formerly known as ClawdBot and MoltBot, experienced a significant security breach. Over 340 malicious 'skills' were uploaded to its ClawHub marketplace, many disguised as cryptocurrency tools. These skills, once installed, executed obfuscated commands leading to the deployment of the Atomic macOS Stealer (AMOS) malware. This malware targeted sensitive user data, including API keys, wallet private keys, SSH credentials, and browser passwords. The rapid adoption of OpenClaw, with over 30,000 online instances by late January 2026, coupled with minimal security oversight, facilitated this large-scale supply chain attack. ([aviatrix.ai](https://aviatrix.ai/threat-research-center/openclaw-2026-clawhub-malicious-skills/?utm_source=openai)) This incident underscores the growing trend of cybercriminals exploiting AI assistant platforms to distribute malware. The integration of AI agents into daily workflows, especially in sectors like cryptocurrency trading, presents new attack vectors. Organizations must prioritize the security of AI ecosystems, ensuring rigorous vetting of third-party extensions and continuous monitoring to mitigate such threats.
5 months ago
Kill Chain
OpenClaw 2026 Infostealer Vidar Breach: A Wake-Up Call for AI Security
In February 2026, cybersecurity researchers identified a significant security breach involving OpenClaw, an open-source AI agent platform. An infostealer malware, likely a variant of Vidar, infiltrated a user's system and exfiltrated sensitive OpenClaw configuration files. These files contained critical data, including API keys for AI services, OAuth tokens for platforms like Gmail and Slack, and detailed operational guidelines of the AI agent. The theft of these credentials enabled attackers to remotely access and control the victim's OpenClaw instance, potentially leading to unauthorized actions and data exfiltration. This incident underscores the evolving threat landscape where infostealer malware targets AI agent configurations, highlighting the urgent need for enhanced security measures in AI integrations. As AI agents become more embedded in professional workflows, they present attractive targets for cybercriminals aiming to exploit their access to sensitive data and systems.
5 months ago
Kill Chain
Major Password Managers Exposed: Critical Vulnerabilities Affect Millions
In February 2026, researchers from ETH Zurich and Università della Svizzera italiana identified critical vulnerabilities in three major cloud-based password managers: Bitwarden, LastPass, and Dashlane. The study revealed 25 distinct attacks that could compromise user vaults, ranging from integrity violations to complete access to all stored passwords. These vulnerabilities exploit flaws in key escrow mechanisms, item-level encryption, sharing features, and backward compatibility with legacy code. Collectively, these password managers serve over 60 million users and nearly 125,000 businesses. ([thehackernews.com](https://thehackernews.com/2026/02/study-uncovers-25-password-recovery.html?utm_source=openai)) This incident underscores the importance of scrutinizing the security claims of widely-used password management solutions. As cyber threats evolve, organizations must ensure that their security tools are resilient against sophisticated attacks, especially those targeting foundational security mechanisms like zero-knowledge encryption.
5 months ago
Kill Chain
Over 260,000 Chrome Users Deceived by Malicious AI Extensions
In early 2026, over 260,000 Google Chrome users were deceived into installing more than 30 malicious browser extensions masquerading as AI tools. These extensions, with names like 'ChatGPT Translate' and 'AI Assistant,' appeared legitimate and were even featured in the Chrome Web Store, accumulating numerous positive reviews. Once installed, they clandestinely extracted sensitive data, including browsing history and email content, by loading remote content through iframes, allowing operators to alter functionality without submitting updated versions for review. This structure enabled the extensions to modify behavior dynamically and potentially evade additional scrutiny. ([darkreading.com](https://www.darkreading.com/cyber-risk/chrome-fake-ai-browser-extensions/?utm_source=openai)) This incident underscores a growing trend where cybercriminals exploit the popularity of AI tools to distribute malware. The use of trusted platforms like the Chrome Web Store to disseminate these malicious extensions highlights the need for enhanced vigilance and security measures in browser extension ecosystems.
5 months ago
Kill Chain
Illinois Man's Phishing Scheme Compromises Hundreds of Women's Snapchat Accounts
Between May 2020 and February 2021, Kyle Svara, a 26-year-old from Illinois, orchestrated a phishing campaign targeting nearly 600 women to gain unauthorized access to their Snapchat accounts. By impersonating Snap Inc. representatives, he solicited security codes from over 4,500 individuals, successfully compromising at least 59 accounts to steal and distribute private images. Notably, Svara collaborated with former Northeastern University track coach Steve Waithe, who hired him to hack accounts of female student-athletes. Waithe was sentenced to five years in prison in March 2024 for related offenses. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/man-pleads-guilty-to-hacking-nearly-600-womens-snapchat-accounts/?utm_source=openai)) This incident underscores the persistent threat of social engineering attacks and the exploitation of personal data for malicious purposes. Organizations must remain vigilant against such tactics, emphasizing the importance of user education and robust security measures to protect sensitive information.
5 months ago
Kill Chain
Anthropic's Claude Opus 4.6: A Game-Changer in AI-Driven Cybersecurity
In February 2026, Anthropic's AI model, Claude Opus 4.6, identified over 500 previously unknown high-severity vulnerabilities in widely used open-source libraries, including Ghostscript, OpenSC, and CGIF. The model autonomously discovered these flaws without specific instructions, demonstrating advanced code analysis capabilities. The vulnerabilities ranged from system crashes to memory corruption issues, all of which have since been patched by the respective maintainers. This incident underscores the growing role of AI in cybersecurity, highlighting both its potential to enhance defense mechanisms and the necessity for robust safeguards against misuse. The discovery also emphasizes the critical need for continuous monitoring and rapid patching of open-source software to maintain security integrity.
5 months ago
Kill Chain
dYdX Supply Chain Attack Exposes Cryptocurrency Wallets to Theft
In early February 2026, dYdX, a decentralized cryptocurrency exchange, experienced a significant supply chain attack. Malicious actors compromised legitimate npm and PyPI packages—@dydxprotocol/v4-client-js and dydx-v4-client, respectively—by publishing infected versions using legitimate developer credentials. These compromised packages were designed to steal wallet credentials and, in the case of the PyPI package, deploy a remote access trojan (RAT) for executing arbitrary commands on affected systems. The attack underscores the vulnerabilities inherent in software supply chains and the potential for widespread impact when trusted distribution channels are exploited. This incident highlights a persistent pattern of adversaries targeting dYdX-related assets through trusted distribution channels, following similar attacks in 2022 and 2024. The coordinated cross-ecosystem deployment and sophisticated obfuscation techniques suggest that threat actors had direct access to publishing infrastructure, emphasizing the need for enhanced security measures in software development and distribution processes.
5 months ago
Kill Chain
Moltbook's 2026 Security Breach: A Cautionary Tale of Cloud Misconfiguration
In late January 2026, Moltbook, an AI-exclusive social platform, suffered a significant security breach due to a misconfigured Supabase database. This vulnerability exposed sensitive data, including 1.5 million AI agent API tokens, 35,000 email addresses, and private messages. The misconfiguration allowed unauthorized access and modification of agent records, leading to potential impersonation and data manipulation. Promptly addressing the issue, Moltbook resolved the vulnerability within hours of disclosure. ([techradar.com](https://www.techradar.com/pro/security/ai-agent-social-media-network-moltbook-is-a-security-disaster-millions-of-credentials-and-other-details-left-unsecured?utm_source=openai)) This incident underscores the critical importance of robust security configurations in cloud-based platforms, especially those handling sensitive user data. It highlights the risks associated with rapid deployment of AI-driven services without comprehensive security assessments, emphasizing the need for stringent access controls and regular security audits to prevent similar breaches.
5 months ago
Kill Chain
Shai-Hulud: Unveiling the 2025 npm Supply Chain Attack
In September 2025, the Shai-Hulud malware campaign emerged as a significant supply chain attack targeting the npm ecosystem. The self-replicating worm compromised over 180 npm packages within 48 hours, including those maintained by prominent organizations like CrowdStrike. By exploiting post-install scripts, the malware harvested developer credentials, including npm tokens, GitHub personal access tokens, and cloud service keys. It established persistence through malicious GitHub Actions workflows, enabling further propagation by republishing infected versions across the victim maintainer's other packages. This attack underscored the vulnerabilities inherent in open-source supply chains and the potential for widespread impact when trusted developer pipelines are exploited. ([protoslabs.io](https://www.protoslabs.io/resources/deep-dive-shai-hulud-the-self-replicating-npm-supply-chain-worm?utm_source=openai)) The Shai-Hulud incident highlights a growing trend of sophisticated supply chain attacks that leverage automation and trusted relationships within the developer ecosystem. The rapid escalation and scale of this campaign serve as a stark reminder of the critical need for enhanced security measures, including stringent access controls, continuous monitoring, and the adoption of zero-trust principles to safeguard against such pervasive threats. ([tomshardware.com](https://www.tomshardware.com/tech-industry/cyber-security/shai-hulud-malware-campaign-dubbed-the-largest-and-most-dangerous-npm-supply-chain-compromise-in-history-hundreds-of-javascript-packages-affected?utm_source=openai))
5 months ago
Kill Chain
Critical OS Command Injection Vulnerability in React Native CLI's Metro Development Server
In November 2025, a critical vulnerability (CVE-2025-11953) was identified in the React Native Community CLI's Metro Development Server. This flaw allowed unauthenticated attackers to execute arbitrary commands on the host system by sending specially crafted POST requests to the server's '/open-url' endpoint. The vulnerability affected versions 4.8.0 through 20.0.0-alpha.2 and was patched in version 20.0.0. Developers were advised to update their installations promptly or restrict the server's network exposure to mitigate the risk. ([research.jfrog.com](https://research.jfrog.com/vulnerabilities/react-native-cli-command-injection-jfsa-2025-001495618/?utm_source=openai)) The incident underscores the importance of securing development tools and environments, as vulnerabilities in such tools can serve as entry points for attackers. It also highlights the need for developers to stay vigilant about applying security patches and configuring development servers securely to prevent unauthorized access.
5 months ago
Kill Chain
Zendesk 2026 Spam Campaign: A Wake-Up Call for Securing Support Systems
In January 2026, a massive global spam campaign exploited unsecured Zendesk support systems, allowing attackers to flood users' inboxes with automated 'ticket received' emails. By abusing Zendesk instances that permitted unverified users to submit support tickets, attackers generated numerous fake tickets using large email lists. This resulted in victims receiving confirmation emails from legitimate Zendesk domains, enabling the messages to bypass spam filters and inundate users' inboxes. Affected organizations included major companies such as Discord, Tinder, Riot Games, Dropbox, CD Projekt, NordVPN, and various Tennessee state departments. Notably, the spam emails did not contain malware or phishing links but featured bizarre and seemingly pointless messages, such as fake law enforcement takedown requests and promotional offers. Zendesk acknowledged the issue and responded by implementing new safety measures, including enhanced monitoring and stricter activity limits to detect and halt spam efforts more effectively. The campaign began on January 18, 2026, but its current status remains unclear. ([techradar.com](https://www.techradar.com/pro/security/zendesk-tickets-hijacked-in-massive-spam-campaign?utm_source=openai)) This incident underscores the critical importance of securing customer support platforms against abuse. The exploitation of Zendesk's ticketing system highlights a broader trend where attackers leverage legitimate services to conduct spam campaigns, thereby evading traditional security measures. Organizations must proactively assess and fortify their support systems to prevent similar abuses, ensuring that such platforms do not become vectors for large-scale spam or other malicious activities.
5 months ago
Kill Chain
Ransomware Gangs Exploit ISPsystem VMs for Stealthy Payload Delivery
In early 2026, cybersecurity researchers uncovered that multiple ransomware groups, including LockBit, Qilin, Conti, BlackCat/ALPHV, and Ursnif, were exploiting virtual machines (VMs) provisioned by ISPsystem's VMmanager to host and deliver malicious payloads. These attackers utilized default Windows VM templates with identical hostnames, allowing them to blend malicious infrastructure with legitimate systems, thereby complicating detection and takedown efforts. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/ransomware-gang-uses-ispsystem-vms-for-stealthy-payload-delivery/?utm_source=openai)) This incident highlights a growing trend where cybercriminals leverage legitimate virtualization platforms to obfuscate their operations. The ease of deploying VMs with default configurations presents a significant security risk, emphasizing the need for organizations to scrutinize and secure their virtual infrastructure to prevent such abuses. ([sophos.com](https://www.sophos.com/en-us/blog/malicious-use-of-virtual-machine-infrastructure?utm_source=openai))
5 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports