Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Computer Software/Engineering

Breach intelligence, attack campaigns, and threat reports targeting the Computer Software/Engineering sector.

2541 threat reports
Page 8 of 212
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Computer Software/Engineering Threat Reports

Showing 85–96 / 2541 reports
REF8801: How a Fake Web3 Accelerator Turned npm Packages Into an AI Agent Spy Operation
REF8801: How a Fake Web3 Accelerator Turned npm Packages Into an AI Agent Spy Operation
Financial Services2 weeks ago

REF8801: How a Fake Web3 Accelerator Turned npm Packages Into an AI Agent Spy Operation

In October 2026, Elastic Security Labs uncovered REF8801, a threat operation posing as a Web3 venture capital accelerator called Apex Accelerator. The campaign published malicious npm packages—@apexacc/cli and @apexacc/audit—targeting cryptocurrency founders and developers with promises of AI credits, coding tools, and smart contract audits. Once installed, the packages deployed the CloudSyncD macOS backdoor and a custom Windows infostealer exfiltrating data via Telegram, while simultaneously hijacking victims' AI agent traffic by redirecting OpenRouter LLM requests through attacker-controlled infrastructure and registering rogue MCP servers to intercept prompts, code snippets, and conversation history. This campaign reflects a sharp escalation in supply-chain threats targeting the intersection of Web3 and agentic AI ecosystems. As developers increasingly embed LLM-powered agents into workflows, attackers are pivoting from credential theft alone to compromising the AI control plane itself—silently reshaping agent behavior, poisoning prompt context, and exfiltrating proprietary code and conversation data at scale.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
Rank Math PRO Hijacked: How a Trusted WordPress Plugin Update Channel Became a Self-Restoring Backdoor
Rank Math PRO Hijacked: How a Trusted WordPress Plugin Update Channel Became a Self-Restoring Backdoor
Internet2 weeks ago

Rank Math PRO Hijacked: How a Trusted WordPress Plugin Update Channel Became a Self-Restoring Backdoor

Between 20:02 UTC on October 15 and 07:12 UTC on October 16, 2026, attackers compromised Rank Math's own distribution infrastructure and replaced legitimate downloads and auto-updates of the paid Rank Math PRO WordPress SEO plugin (v3.0.123) with a malware-laced build. Any site that installed and activated the tainted copy should be treated as fully compromised. The malware (CVE-2026-111862, CVSS 9.8) installs a self-restoring PHP backdoor, drops rogue admin accounts, adds SSH keys, modifies .htaccess to execute .cache files as PHP, plants scheduled tasks, and exfiltrates credentials to the attacker-controlled domain rank1cdn[.]com—registered roughly 24 hours before the attack window opened. This incident is the third confirmed case in 2026 of a premium WordPress plugin vendor's update channel being weaponized to deliver backdoored builds, following similar attacks on Smart Slider 3 Pro in April and ShapedPlugin Pro plugins in June. The pattern signals a deliberate, escalating campaign targeting the supply chains of commercial WordPress ecosystems, where millions of sites silently auto-update from vendor-controlled servers outside the scrutiny of WordPress.org's checksum infrastructure.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
GhostAction's Font File Trick: How a Fake Woff2 Asset Stole Secrets from 94 GitHub Repos
GhostAction's Font File Trick: How a Fake Woff2 Asset Stole Secrets from 94 GitHub Repos
Computer Software/Engineering2 weeks ago

GhostAction's Font File Trick: How a Fake Woff2 Asset Stole Secrets from 94 GitHub Repos

In October 2026, the GhostAction threat actor escalated a supply-chain campaign by registering the phishing domain my-github[.]com and deploying a reverse-proxy kit that silently harvested GitHub credentials and 2FA codes, then stealthily authorized OAuth tokens with repo and workflow write permissions. The actor embedded a credential stealer inside a fake font file (fa-solid-400.woff2) committed to 94 repositories across 66 owners, using a VS Code tasks.json runOn:folderOpen trigger to persist on developer machines entirely outside GitHub's runner controls. The stealer harvested AWS keys, PyPI and npm tokens, Kubernetes credentials, SSH private keys, and AI provider secrets, exfiltrating everything over plain HTTP to a single attacker-controlled IP. This incident illustrates a maturing supply-chain playbook in which attackers combine OAuth device-code phishing, IDE auto-execution abuse, and stealer malware disguised as legitimate assets to survive platform-level mitigations. As open-source ecosystems grow more interconnected, a single compromised maintainer account can cascade stolen secrets across thousands of downstream consumers, amplifying both blast radius and regulatory exposure.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
Fake Claude & ChatGPT Campaigns Are Targeting Your Developers Right Now
Fake Claude & ChatGPT Campaigns Are Targeting Your Developers Right Now
Computer Software/Engineering2 weeks ago

Fake Claude & ChatGPT Campaigns Are Targeting Your Developers Right Now

Between April and October 2026, threat actors launched over 1,258 documented campaigns impersonating popular AI brands including Anthropic's Claude and OpenAI's ChatGPT to target enterprise developers and marketing professionals. Attackers leveraged SEO poisoning, malicious ads, fake GitHub-hosted CLI installers, and ClickFix-style social engineering to trick employees into running malicious terminal commands or pasting payloads into their systems. Successful compromises resulted in the theft of source code, SSH keys, CI/CD tokens, cloud API credentials, and active business session cookies—turning a single user action into broad organizational exposure including financial loss and supply chain risk. These campaigns reflect a rapidly maturing social engineering playbook that weaponizes the AI adoption wave. As enterprises push employees to integrate AI tooling into daily workflows, attackers exploit the resulting trust and urgency. The combination of legitimate hosting infrastructure (Claude.ai, ChatGPT domains, Cloudflare Pages, GitHub) with ClickFix and InstallFix tactics makes detection extremely difficult and signals a durable, escalating threat to developer-heavy organizations.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(medium)
Read report
CVE-2026-21589: Atlassian Data Center Under Siege as Exploits Hit Within Hours
CVE-2026-21589: Atlassian Data Center Under Siege as Exploits Hit Within Hours
Information Technology/IT3 weeks ago

CVE-2026-21589: Atlassian Data Center Under Siege as Exploits Hit Within Hours

Threat actors are actively exploiting CVE-2026-21589, a critical vulnerability in Atlassian Data Center products including Bitbucket, Confluence, and Jira, within two hours of public proof-of-concept release. The flaw allows unauthenticated attackers to access sensitive configuration files through path traversal sequences, potentially exposing administrative credentials and enabling privilege escalation. Multiple enterprises running unpatched Atlassian instances face immediate risk of unauthorized access and data compromise. This incident demonstrates the accelerating timeline between vulnerability disclosure and active exploitation, highlighting the critical importance of rapid patch deployment and network segmentation for enterprise applications exposed to the internet.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
SneakPeek Vulnerability Exposes Critical AI Development Tool Security Gaps
SneakPeek Vulnerability Exposes Critical AI Development Tool Security Gaps
Computer Software/Engineering3 weeks ago

SneakPeek Vulnerability Exposes Critical AI Development Tool Security Gaps

In July 2026, security researchers at Noma disclosed a high-severity vulnerability dubbed 'SneakPeek' in Anthropic's Claude Code Desktop application. The zero-click vulnerability exploited flaws in the automated preview pane's sandbox architecture, allowing attackers to silently exfiltrate sensitive developer credentials including SSH private keys, AWS tokens, and OAuth credentials. By placing malicious HTML files larger than 256KB in public repositories, attackers could trigger automatic code execution when developers used Claude to review files, bypassing all sandbox protections through missing content security policies and unrestricted origin access. This incident highlights the growing security risks in AI-powered development tools as organizations increasingly integrate autonomous AI agents into critical workflows. The vulnerability required two separate patches after researchers bypassed the initial fix, demonstrating the complexity of securing AI applications and the need for comprehensive runtime protection beyond vendor-provided security baselines.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security
The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security
Financial Services3 weeks ago

The BYOVD Trust Gap: How Vulnerable Drivers Bypass Modern Security

Bring Your Own Vulnerable Driver (BYOVD) attacks exploit a fundamental trust gap in Windows kernel security, where attackers leverage legitimate but vulnerable signed drivers to bypass endpoint protection systems. Recent analysis shows approximately 36% of catalogued vulnerable drivers remain unblocked by default Windows security policies, with attackers exploiting revoked and expired certificates that the kernel still accepts. These attacks concentrate on compromised signing certificates rather than individual drivers, allowing threat actors to generate unlimited malicious payloads using stolen cryptographic keys. The persistence of this attack vector demonstrates a structural flaw in how operating systems validate driver trust, with some vulnerable drivers remaining exploitable for years after initial disclosure. This attack method has gained renewed prominence as ransomware groups and APT actors increasingly adopt BYOVD techniques to disable security tools and establish kernel-level persistence, highlighting the urgent need for trust-based rather than signature-based defensive approaches.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected
Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected
Computer Software/Engineering3 weeks ago

Langflow's Critical RCE Flaw Under Active Attack: 1,423 Exploitation Attempts Detected

A critical authenticated remote code execution vulnerability (CVE-2026-105740, CVSS 9.9) in Langflow, an open-source AI application development platform owned by DataStax and acquired by IBM in February 2025, is being actively exploited by threat actors. The flaw allows any authenticated user to execute arbitrary OS commands through malicious MCP server configurations with zero validation. Previdian honeypot sensors recorded 1,423 exploitation attempts from 27 unique IP addresses across 15 countries since September 2026, with activity significantly ramping up in October. Attackers are using common credentials to authenticate and then exploiting the vulnerability to extract sensitive configurations, access host filesystems, and establish persistent backdoors. This incident highlights the growing threat landscape targeting AI development platforms as organizations rapidly adopt AI technologies without adequate security oversight. The systematic targeting of multiple Langflow vulnerabilities by the same threat actors demonstrates the critical need for securing AI infrastructure as these platforms become integral to business operations.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
GhostAction Returns: Massive GitHub Supply Chain Attack Targets Developer Infrastructure
GhostAction Returns: Massive GitHub Supply Chain Attack Targets Developer Infrastructure
Computer Software/Engineering3 weeks ago

GhostAction Returns: Massive GitHub Supply Chain Attack Targets Developer Infrastructure

In October 2026, the GhostAction supply chain attack campaign escalated dramatically, compromising approximately 1,900 GitHub accounts and targeting over 30,000 repositories across 3,000 users and organizations. Threat actors used stolen Personal Access Tokens and credentials from infostealer logs to gain write access to legitimate repositories, then injected malicious GitHub Actions workflows disguised as security audits. The campaign focused on large-scale theft of CI/CD secrets, cloud credentials, package registry tokens, and AI provider API keys through automated secret scanning of repository histories. This incident highlights the growing sophistication of supply chain attacks targeting developer infrastructure and the critical need for enhanced security controls around CI/CD pipelines and secret management in cloud-native environments.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
Fake AI Malware Campaigns Target 1,258 US Companies in 2026
Fake AI Malware Campaigns Target 1,258 US Companies in 2026
Computer Software/Engineering3 weeks ago

Fake AI Malware Campaigns Target 1,258 US Companies in 2026

Between April and October 2026, cybercriminals launched sophisticated fake AI campaigns targeting US businesses, with attackers impersonating popular AI services like Claude, ChatGPT, GitHub Copilot, and Gemini to distribute infostealer malware. ANY.RUN identified 1,258 public sandbox analyses linked to these campaigns, with US companies accounting for 16% of targeted victims. The attacks used deceptive download pages and malicious PowerShell commands to steal browser sessions, compromise business accounts, and establish persistent access to corporate networks through legitimate-appearing AI software installations. These campaigns represent a significant evolution in social engineering tactics, exploiting the widespread adoption of AI tools in enterprise environments to bypass traditional security awareness training and detection mechanisms.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(medium)
Read report
Critical Next.js RCE Vulnerabilities Demand Immediate Patching
Critical Next.js RCE Vulnerabilities Demand Immediate Patching
Computer Software/Engineering3 weeks ago

Critical Next.js RCE Vulnerabilities Demand Immediate Patching

On October 14, 2026, Vercel released an out-of-band security update for Next.js addressing two critical remote code execution vulnerabilities with CVSS scores of 9.5. The first flaw (GHSA-673q-mjm6-r5xr) affects React Server Components in Next.js 16.x applications using Cache Components with use cache functions returning multiple typed arrays. The second vulnerability (CVE-2026-96889) stems from a memory bug in the librsvg library used by Next.js through the sharp package for SVG processing, affecting applications running on glibc-based Linux systems. A third high-severity denial-of-service flaw targeting Server Actions was also patched, affecting App Router applications since Next.js 13.0.0. This incident highlights the persistent supply chain security challenges facing modern web frameworks, particularly as Next.js has experienced three image processing vulnerabilities since August 2026. With the framework's widespread adoption in enterprise applications and the availability of public exploits for similar flaws, organizations must prioritize immediate patching and implement robust dependency management practices.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(low)
IImpact(high)
Read report
Critical Drupal Field UI Vulnerability Exposes 150K+ Sites to Remote Code Execution
Critical Drupal Field UI Vulnerability Exposes 150K+ Sites to Remote Code Execution
Computer Software/Engineering3 weeks ago

Critical Drupal Field UI Vulnerability Exposes 150K+ Sites to Remote Code Execution

In October 2026, the Drupal Security Team disclosed a critical remote code execution vulnerability (CVE-2026-108097) in Drupal core's Field UI module, affecting versions 10.6.x, 11.3.x, and 11.4.x. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable servers when exploited through contributed modules, with at least one known exploit path requiring no authentication. Patches were released on October 14, 2026, with affected versions updated to 11.4.10, 11.3.19, and 10.6.19. Over 151,000 Drupal sites (28.5% of reporting sites) were running vulnerable versions that received no security updates. This vulnerability represents a growing trend of critical web application flaws targeting content management systems, particularly as organizations increasingly rely on third-party modules and plugins. The incident highlights the persistent challenge of supply chain security in web applications, where core platform vulnerabilities can be weaponized through seemingly unrelated contributed components.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports