“GitHub”

Attacker-inserted backdoors via GitHub tags affected numerous Laravel-Lang packages. Audit dependencies and rotate credentials.

Poisoned VS Code extension led to internal repo access; reinforces dev-tool supply-chain risk.

Threat actors hijacked a popular GitHub Actions workflow, redirecting all tags to an imposter commit to harvest CI/CD credentials. Review CI workflows and revoke compromised tokens.

Microsoft released a broad May 2026 Patch Tuesday covering 120 vulnerabilities across Windows, Azure, and Office, including 29 critical RCE flaws. Patch management is essential to reduce exposure.

Tiny package-based attack chain shows rapid compromise across popular software ecosystems.

Mini Shai-Hulud supply-chain attack breached SAP-related NPM packages to steal credentials; review dependencies and monitor for credential theft.

A maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.

RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.

Critical pre-auth SQL injection in LiteLLM openly exploited in the wild, exposing cloud credentials.

New Windows RPC flaw PhantomRPC enables LPE with multiple exploitation paths; disclosed at Black Hat Asia 2026.

Unauthenticated command execution demonstrated; patch recommended and mitigations outlined.

Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.

A critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.

A critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.

A critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.

A critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.

A critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.