✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Computer Software/Engineering
Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.
Explore Other Sectors
Computer Software/Engineering Threat Reports
Notepad++ 2025 Supply Chain Attack: Lessons in Software Security
In June 2025, Chinese state-sponsored hackers compromised the update infrastructure of Notepad++, a widely used text editor, by infiltrating its hosting provider. This allowed them to intercept and selectively redirect update requests from targeted users to malicious servers, delivering tampered update manifests. The attackers exploited vulnerabilities in older versions of Notepad++'s WinGUp update tool, which lacked sufficient verification controls. The breach persisted until December 2, 2025, when the hosting provider detected the intrusion and terminated the attackers' access. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/notepad-plus-plus-update-feature-hijacked-by-chinese-state-hackers-for-months/?utm_source=openai))This incident underscores the critical importance of securing software supply chains, as state-sponsored actors increasingly target update mechanisms to distribute malware. Organizations must implement robust verification processes and regularly audit their infrastructure to prevent similar attacks. ([arstechnica.com](https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/?utm_source=openai))
5 months ago
Kill Chain
OpenClaw 2026: Malicious Skills Distribute Password-Stealing Malware
Between January 27 and February 1, 2026, over 230 malicious 'skills' were uploaded to OpenClaw's official registry and GitHub repositories. These skills, masquerading as legitimate utilities, contained malware designed to steal sensitive information such as API keys, wallet private keys, SSH credentials, and browser passwords. The attackers exploited OpenClaw's plugin system to distribute these malicious packages, leading to significant data breaches for users who installed them. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/malicious-moltbot-skills-used-to-push-password-stealing-malware/?utm_source=openai)) This incident underscores the growing trend of supply chain attacks targeting open-source platforms. The ease of publishing and distributing plugins or extensions in such ecosystems presents a lucrative vector for cybercriminals. Organizations must exercise heightened vigilance when integrating third-party tools, ensuring thorough vetting processes to mitigate potential security risks.
5 months ago
Kill Chain
Open VSX Registry Compromised: GlassWorm Malware Infiltrates Developer Extensions
In late January 2026, a significant supply chain attack targeted the Open VSX Registry, an open-source marketplace for Visual Studio Code extensions. Threat actors compromised a legitimate developer's account, identified as 'oorzc', to publish malicious versions of four widely-used extensions. These tampered extensions, collectively downloaded over 22,000 times prior to detection, contained the GlassWorm malware loader. Upon installation, GlassWorm executed stealthily, harvesting sensitive data such as browser credentials, cryptocurrency wallet information, and developer authentication tokens. The malware exhibited advanced evasion techniques, including locale checks to avoid Russian systems and utilizing the Solana blockchain for command-and-control communications. The Open VSX security team promptly removed the malicious extensions and initiated measures to prevent future incidents. This incident underscores the escalating threat of supply chain attacks within developer ecosystems. The exploitation of trusted platforms to disseminate malware highlights the critical need for enhanced security protocols in software distribution channels. Organizations are urged to implement rigorous validation processes for third-party extensions and to monitor for unauthorized access to developer accounts to mitigate similar risks.
5 months ago
Kill Chain
GlassWorm macOS Supply Chain Attack: A Wake-Up Call for Developer Security
In January 2026, the GlassWorm malware campaign targeted macOS developers by infiltrating the Open VSX marketplace with malicious Visual Studio Code extensions. These extensions, downloaded over 50,000 times before removal, masqueraded as legitimate tools like 'Prettier Pro' and other productivity enhancers. Once installed, the malware delayed execution to evade detection, then decrypted and executed an AES-256-CBC encrypted JavaScript payload. It established persistence via LaunchAgents, harvested sensitive data—including GitHub and npm credentials, SSH keys, and macOS Keychain entries—and attempted to replace hardware wallet applications such as Ledger Live and Trezor Suite with trojanized versions. Command-and-control communication was maintained through the Solana blockchain, complicating traditional detection and mitigation efforts. This incident underscores the evolving sophistication of supply chain attacks targeting developer ecosystems, emphasizing the need for rigorous extension vetting processes and heightened awareness of the security risks associated with third-party development tools.
5 months ago
Kill Chain
Notepad++ Supply Chain Attack: A 2025 Case Study
Between June and December 2025, the update mechanism of Notepad++, a widely used text editor, was compromised by state-sponsored attackers. These adversaries infiltrated the shared hosting server of notepad-plus-plus.org, allowing them to intercept and redirect update traffic to malicious servers. This redirection led to the distribution of trojanized installers to select users, primarily targeting telecommunications and financial services organizations in East Asia. The attackers maintained access to internal services until December 2, 2025, enabling continued redirection of update traffic even after losing direct server access. ([arstechnica.com](https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/?utm_source=openai)) This incident underscores the growing threat of supply chain attacks, where trusted software infrastructure is exploited to distribute malware. Organizations must enhance their security measures, particularly in verifying the integrity of software updates, to mitigate such risks. ([cybernews.com](https://cybernews.com/security/state-sponsored-hackers-behind-notepad-plus-plus-hack/?utm_source=openai))
5 months ago
Kill Chain
OpenClaw's ClawHub Compromised: A 2026 Supply Chain Attack
In early 2026, security researchers uncovered a significant supply chain attack within the ClawHub marketplace, a platform for OpenClaw AI assistant extensions. Over 340 malicious 'skills' were identified, many masquerading as cryptocurrency tools, which, upon installation, executed obfuscated commands leading to the deployment of the Atomic macOS Stealer (AMOS) malware. This malware targeted sensitive user data, including browser information and cryptocurrency wallets, affecting both Windows and macOS users. The incident underscores the vulnerabilities in open-source ecosystems and the critical need for rigorous vetting of third-party extensions. The proliferation of such attacks highlights the evolving tactics of cybercriminals, emphasizing the importance of user vigilance and the implementation of robust security measures to protect against sophisticated social engineering and malware distribution strategies.
5 months ago
Kill Chain
Critical OpenClaw Vulnerability Exposes Systems to Remote Code Execution
In early February 2026, a critical vulnerability (CVE-2026-25253) was identified in OpenClaw, an open-source AI personal assistant. This flaw allowed attackers to execute remote code on a victim's system by exploiting the application's handling of the 'gatewayUrl' parameter. By crafting a malicious link, attackers could trick users into initiating a WebSocket connection that transmitted authentication tokens without validation, leading to full system compromise. The issue was addressed in version 2026.1.29, released on January 30, 2026. ([thehackernews.com](https://thehackernews.com/2026/02/openclaw-bug-enables-one-click-remote.html?utm_source=openai)) This incident underscores the importance of rigorous input validation and user confirmation mechanisms in software development. The ease of exploitation and the potential for widespread impact highlight the need for organizations to promptly apply security patches and educate users about the risks associated with clicking untrusted links.
5 months ago
Kill Chain
ShinyHunters' Exploitation of Salesforce: A 2025 Data Breach Analysis
In mid-2025, the cybercriminal group ShinyHunters orchestrated a series of sophisticated attacks targeting Salesforce instances across multiple organizations. Utilizing voice phishing (vishing) techniques, attackers impersonated IT support staff to deceive employees into authorizing malicious connected applications within their Salesforce environments. This strategy granted the attackers unauthorized access to vast amounts of sensitive customer data, including personally identifiable information (PII) and corporate records. Notable victims included Google, Workday, and Qantas, with data breaches exposing millions of records. The stolen data was subsequently used for extortion, with threats to publicly release the information unless ransom demands were met. ([forbes.com](https://www.forbes.com/councils/forbestechcouncil/2025/12/03/shinyhunters-salesloft-drift-and-the-case-for-dynamic-saas-security/?utm_source=openai)) This incident underscores a significant shift in cybercriminal tactics, highlighting the increasing reliance on social engineering methods to exploit human vulnerabilities within organizations. The collaboration between ShinyHunters and other threat actors, such as Scattered Spider, indicates a trend towards more coordinated and aggressive cyberattacks. Organizations are urged to enhance their security awareness programs, implement robust multi-factor authentication protocols, and scrutinize third-party integrations to mitigate the risk of similar breaches. ([cyberpress.org](https://cyberpress.org/shinyhunters-salesforce-hack/?utm_source=openai))
5 months ago
Kill Chain
AI Coding Assistants Found Exfiltrating Code to China in 2026
In January 2026, security researchers uncovered that two AI coding assistant extensions, 'ChatGPT - 中文版' and 'ChatMoss (CodeMoss)', available on the Visual Studio Code Marketplace, were surreptitiously exfiltrating developers' source code to servers in China. These extensions, collectively installed by approximately 1.5 million users, functioned as advertised but secretly transmitted entire file contents and user data without consent. The campaign, dubbed 'MaliciousCorgi', exploited the trust developers place in marketplace extensions, leading to significant exposure of proprietary code and sensitive information. This incident underscores the escalating risks associated with supply chain attacks targeting developer tools. The widespread adoption of AI-powered extensions, combined with insufficient vetting processes in extension marketplaces, has created a fertile ground for malicious actors. Organizations must prioritize stringent security assessments of third-party tools to safeguard intellectual property and maintain operational integrity.
5 months ago
Kill Chain
Google Engineer Convicted of AI Trade Secrets Theft to China
In January 2026, former Google software engineer Linwei Ding was convicted on multiple counts of economic espionage and theft of trade secrets. Between May 2022 and April 2023, Ding illicitly transferred over 2,000 pages of confidential AI-related documents from Google's network to his personal cloud account. These documents detailed Google's proprietary AI supercomputing infrastructure, including custom Tensor Processing Unit (TPU) and Graphics Processing Unit (GPU) technologies, orchestration software for large-scale AI workloads, and SmartNIC networking technology. Concurrently, Ding secretly affiliated with two China-based technology companies, assuming roles such as Chief Technology Officer and CEO, and aimed to replicate Google's AI supercomputing capabilities in China. ([justice.gov](https://www.justice.gov/opa/pr/former-google-engineer-found-guilty-economic-espionage-and-theft-confidential-ai-technology?utm_source=openai)) This incident underscores the persistent threat of insider espionage within the tech industry, particularly concerning advanced AI technologies. It highlights the critical need for robust internal security measures and vigilant monitoring to protect intellectual property from unauthorized access and exfiltration.
6 months ago
Kill Chain
ShinyHunters 2026 Vishing Attacks Breach SaaS Platforms
In January 2026, the financially motivated hacking group ShinyHunters orchestrated a series of sophisticated voice phishing (vishing) attacks targeting employees of various organizations. By impersonating IT staff, they directed victims to fraudulent credential harvesting sites, capturing Single Sign-On (SSO) credentials and Multi-Factor Authentication (MFA) codes. This access enabled them to infiltrate cloud-based Software-as-a-Service (SaaS) platforms, exfiltrating sensitive data and internal communications, which were subsequently used for extortion purposes. The campaign notably affected platforms such as Okta, Microsoft 365, and Google Workspace, compromising numerous organizations across multiple sectors. This incident underscores the evolving tactics of cybercriminals, highlighting the increasing sophistication of social engineering methods to bypass traditional security measures. The reliance on vishing and real-time phishing kits to exploit identity providers and SaaS platforms emphasizes the urgent need for organizations to adopt phishing-resistant MFA solutions and enhance employee training to recognize and respond to such threats.
6 months ago
Kill Chain
Aisle's AI Uncovers Decades-Old OpenSSL Vulnerabilities
In January 2026, Aisle's AI-assisted cybersecurity team uncovered 12 previously undetected vulnerabilities in the OpenSSL codebase, some dating back to 1998. These vulnerabilities, ranging from stack buffer overflows to encryption flaws, were promptly patched. The discovery underscores the limitations of human-only vulnerability detection and highlights the efficacy of AI-powered security tools in identifying longstanding security issues. This incident emphasizes the growing role of AI in cybersecurity, showcasing its potential to enhance threat detection and response capabilities. As AI-driven cyber threats become more sophisticated, integrating AI into security operations is increasingly vital for organizations aiming to protect their digital assets.
6 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports