#supply-chain-attack — Public Fediverse posts

Kaspersky: APAC cyber threats remain high, 75 million attacks blocked in six months #apac #apt #cyberattack #cybersecurity #digitallife #escan #great #kaspersky #kasperskygreat #news #notepad #supplychainattack

https://soyacincau.com/2026/08/18/kaspersky-apac-75-million-attacks-blocked-h1-2026/

Hey everyone! Terabytes worth of #credentials, for more than 2500 massive Fortune 500 type orgs have been exposed in a supply-chain attack on #LiteLLM.

The breach was reported Tuesday and Wednesday by security firms #CloudSEK and #HudsonRock. (Links below) CloudSEK said it found cloud keys, repository tokens, #SSH keys, #Kubernetes secrets, package publishing credentials, environment variables, and AI provider #keys.

This, in the world of #infosec, is called A Bad Thing. The fact that some of the credentials are still live, is mind boggling.

#ai #security #SupplyChainAttack #hack

https://www.cloudsek.com/blog/ai-supply-chain-breach-2500-companies-434000-cicd-pipelines

Companies exposed: https://exposure.cloudsek.com/ai-supply-chain-incident

https://www.hudsonrock.com/blog/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure

ArsTecnica overview: https://arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/

A #supplychainattack on the #opensource tool #LiteLLM exposed #terabytes of #credentials belonging to over 2,500 organisations, including Microsoft, Amazon, and Cisco. The attack, attributed to the group TeamPCP, exploited a #vulnerability in the #vulnerabilityscanner #Trivy and compromised versions of LiteLLM, KICS, and the Telnyx Python SDK. Security firms CloudSEK and Hudson Rock urge affected organisations to rotate credentials. https://arstechnica.com/security/2026/08/terabytes-of-credentials-leaked-in-massive-supply-chain-attack/?eicker.news #tech #news #ainews

Reward: You've received a Participation Certificate (Compromised Edition). It is non-transferable. Your credentials, however, were.

#SupplyChainAttack #Malware #npm #SoftwareSecurity #CredentialTheft #WormPropagation (3/3)

Lieferketten-Angriff auf #keyv: #ShaiHulud-Wurm infiziert mehr als 440 #npm-Pakete | Developer https://www.heise.de/news/Lieferketten-Angriff-auf-keyv-Shai-Hulud-Wurm-infiziert-mehr-als-440-npm-Pakete-11403078.html #SupplyChain #SupplyChainAttack #malware

Oracle Exploited: Attackers Turn SQL Injection into Windows SYSTEM Access

Attackers have successfully exploited a SQL injection vulnerability to gain unprecedented access to Oracle databases, converting it into a Windows SYSTEM-level access with alarming ease. This rare and sophisticated technique has allowed hackers to deploy a custom toolkit, dubbed khunt, that turns database-stored Java…

https://osintsights.com/oracle-exploited-attackers-turn-sql-injection-into-windows-system-access?utm_source=mastodon&utm_medium=social

#SqlInjection #Oracle #Java #WindowsPrivilegeEscalation #SupplyChainAttack

A #supplychainattack on the #npm registry compromised over 1,300 packages, including popular ones like #Keyv and #Cacheable. The attack, which started with the compromise of Keyv’s #GitHub account, deployed a self-propagating malware named #ChainDrop. This #malware steals sensitive information, including developer and cloud credentials, and spreads to other packages. https://www.bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/?eicker.news #tech #news #ainews

Keyv and friends compromised in active Shai-Hulud supply chain attack

https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack

Comments: https://news.ycombinator.com/item?id=49166874

#HackerNews #Keyv #Shai-Hulud #supplychainattack #cybersecurity #npm

@hacksilon PS. I like to add more hashtags to make it easier for people to find your post about malicious adform package.

#supplychain #supplychainsecurity #supplychainattack #npm #npmsecurity #ioc

#security / reducing the blast radius of #SupplyChainAttack question on #Ubuntu

I need to use my personal laptop for some development work. How do I reduce the blast radius of a supply chain attack on my personal laptop?

Would having 2 separate Ubuntu installed on my laptop one for dev and other for personal use be a meaningful defense?

Would building and running code in a virtualized environment (VM, Docker, etc) help or is it trivial for an attacker to escape the virtual environment?

If just on one OS, I can definitely have 2 different users (for personal use vs dev work). But is that meaningful if I have sudo access for both personal and dev accounts? Wouldn't a malicious program on the dev user account just be able to access my personal use home directory?

Open to anything that doesn't fall in the above categories.

#infosec #cybersecurity

Learn how to use the Arch User Repository (AUR) safely. Discover the lessons from the June 2026 AUR malware attack and protect your Arch Linux system.

Full details here: https://ostechnix.com/use-the-aur-safely-arch-linux/

#ArchUserRepository #AUR #ArchLinux #Security #Malware #SupplyChainAttack #AtomicArch #Linux

Jscrambler’s npm Package Got Backdoored. The Malware Ran Before Your App Ever Started.

https://thecybersecguru.com/news/jscrambler-npm-supply-chain-attack-2026/

Basta un npm install: la 8.14.0 di jscrambler distribuiva un infostealer Rust nelle pipeline di sviluppo

https://insicurezzadigitale.com/basta-un-npm-install-la-8-14-0-di-jscrambler-distribuiva-un-infostealer-rust-nelle-pipeline-di-sviluppo/

I've blogged. Cool down your dependencies: www.eke.li/security/2026/06/19/dependency-cooldowns.html

#dev #dependencyManagement #supplychainattack

In Anbetracht der aktuellen Angriffe auf das #AUR Repository, sehe ich dunkle Wolken auch für andere Repositories aufziehen. #AUR schätze ich als verhältnismäßig leichtes Ziel ein, aber die Unsympathen üben möglicherweise nur.

Die Bedrohungslage ist nicht nur gefühlt ziemlich hoch.

#OSS #OpenSource #SupplyChain #SupplyChainAttack #Risiko

RE: https://fosstodon.org/@archlinux/116738652549604531

#Archlinux Supply chain incident shows the thing that always ignored by common people:

Expecting you are not the target, because people rarely used it.

Which points to: Attackers will do things where it is the place you are least expect.

#cybersecurity #supplychainattack

📣🚨 Over 20 Linux packages were compromised in the #AtomicArch campaign, which abuses AUR ownership transfers to drop rootkit-like malware.

Read: https://hackread.com/atomic-arch-hijacks-linux-aur-packages-malware/

#CyberSecurity #Linux #Malware #SupplyChainAttack

@sodiboo @ifin @threatintel Made a consolidated AUR malware checker for the atomic-lockfile supply-chain attack now on GitHub.

Merges detection scripts from the gist[1] and Kidev, BrianCArnold, commonsourcecs, Kacper-Kondracki, quantenProjects, Andre Herbst, ioctl.fail, and Kusoneko into a single repo. Checks known compromised packages, scans pacman.log history, checks for systemd persistence and eBPF rootkit artifacts.

https://github.com/lenucksi/aur-malware-check

UPDATE 7/13/26: Friendly contributors added a 'download official arch hedgedoc list' and the new new bun package and I added some more convenience features.

[1] https://gist.github.com/Kidev/59bf9f5fb53ab5eee99f19a6a2fc3992

#AUR #ArchLinux #SupplyChainAttack #Malware #InfoSec #atomiclockfile

Campagna Hades colpisce PyPI: 37 pacchetti malevoli della famiglia Shai-Hulud/Miasma rubano credenziali sviluppatori

https://insicurezzadigitale.com/campagna-hades-colpisce-pypi-37-pacchetti-malevoli-della-famiglia-shai-hulud-miasma-rubano-credenziali-sviluppatori/

Donating to @libreoffice.

Very important #opensource project, especially now that things are moving in the #digitalsovereignty #SupplyChainattack #enshittification #fuckmicrosoft #FuckGoogle areas.

Personal computing safety goals because of supply chain attacks and possible future issues: create new user account for new projects, clone and test repos in that account only.
Is it hard? No. Could I automate it? maybe. Would it be nice to have built into say conda? Absolutely.
#cybersecurity #programming #supplyChainAttack #Linux #sysadmin