ScarCruft Exploits Gaming Platform in Supply Chain Cyberattack
ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, May 6
Critical cPanel Flaw Exploited Against Government Networks
New cPanel vulnerability exploited to target government and MSP networks. Patch immediately and audit exposure.
Critical Vulnerability in Weaver E-cology Exploited by Cybercriminals
Critical unauthenticated RCE in Weaver E-cology is being actively abused in the wild. Organizations should patch affected builds and monitor for payloads.
Critical Security Flaws in MOVEit Automation Demand Immediate Attention
Progress Software patches a critical MOVEit Automation flaw that could bypass authentication. Immediate action recommended to apply updates.
Monday, May 4
Massive Supply Chain Attack Targets Popular Software Ecosystems
PremiumTiny package-based attack chain shows rapid compromise across popular software ecosystems.
Exim Mail Server Update Resolves Critical Security Vulnerabilities
PremiumExim fixes address memory corruption, crash and data leakage risks across widely used mail servers.
Instructure Confirms Breach as ShinyHunters Claims Responsibility
PremiumEducation tech giant confirms breach; extortion group claims responsibility with potential student data exposure.
Critical Exploit in cPanel & WHM Threatens Thousands of Servers
PremiumTechnical PoC publicly released for CVE-2026-41940; vast exploitation activity observed in wild, enabling pre-authentication access and server compromise.
Friday, May 1
Supply Chain Attack Targets SAP NPM Packages with Malicious Code
PremiumMini Shai-Hulud supply-chain attack breached SAP-related NPM packages to steal credentials; review dependencies and monitor for credential theft.
Windows 11 Update Disrupts Third-Party Backup Software
PremiumApril 2026 Windows 11 update breaks third-party backup software; assess vendor patches and rollback options to avoid data loss.
Critical Flaw in Google Gemini CLI Poses Severe Security Risks
PremiumA maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.
Critical Vulnerability in cPanel & WHM Exploited for Months
PremiumActive exploitation of a critical auth bypass in cPanel/WHM has been observed in the wild for months, enabling unauthorized admin access. Patch and containment efforts are underway.
Wednesday, April 29
Critical GitHub RCE Vulnerability Exposed by AI-Aided Research
RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.
Critical SQL Injection Vulnerability in LiteLLM Exposes Cloud Credentials
Critical pre-auth SQL injection in LiteLLM openly exploited in the wild, exposing cloud credentials.
VECT 2.0 Ransomware Misleads as Destructive Data Wiper
VECT 2.0 acts more as a data wiper due to encryption nonce flaws; recovery unlikely even for attackers.
Microsoft Secures Entra ID Against Privilege Escalation Threat
Flawed Entra ID role could enable privilege escalation; Microsoft issued patches after discovery by researchers.
Monday, April 27
ADT Data Breach Exposes Millions After ShinyHunters' Threat
PremiumADT confirms data breach following ShinyHunters' extortion claim; millions potentially affected.
Urgent Security Alert: SimpleHelp Vulnerabilities Demand Immediate Action
PremiumTwo actively exploited SimpleHelp remote-support flaws pose direct access risks to networks.
FIRESTARTER Backdoor Targets Cisco Devices in Federal Security Breach
PremiumState-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.
PhantomRPC: Unpatched Windows Vulnerability Allows Privilege Escalation
PremiumNew Windows RPC flaw PhantomRPC enables LPE with multiple exploitation paths; disclosed at Black Hat Asia 2026.
Get these articles delivered to your inbox.
Subscribe free