supply chain security13 articles
Chinese Hackers Weaponised a Flaw in Tencent's Sogou to Drop a Backdoor on Hundreds of Millions of Potential Targets
A critical vulnerability (CVE-2026-51990) in Tencent's widely used Sogou Input Method was exploited by the Chinese threat actor UNC3569 to deploy the GrayRabbit backdoor via crafted one-click URLs. The flaw chained three weaknesses — unvalidated argument injection, unrestricted URL navigation, and an outdated, unpatched Chromium 80 browser engine — to achieve system-level code execution. Tencent issued a partial fix in version 16.3.0.3498, though the underlying Chromium configuration remains unaddressed.
StyleSmuggler: Rust-Powered Backdoor Hits Adobe Commerce Stores via Unpatched Zero-Day
A zero-day vulnerability dubbed **StyleSmuggler** is being actively exploited in Adobe Commerce and Magento e-commerce platforms, allowing attackers to inject PHP code into Magento's template system and achieve remote code execution. The two-stage attack triggers a failed payment report to inject the code, then executes it via a payment failure email — requiring no user interaction. Successful attacks deploy a Rust-written backdoor that disguises itself as a legitimate system process and communicates with a command-and-control server, with exploitation observed since September 4; Adobe patches were expected on September 8, though it was unclear whether StyleSmuggler would be addressed.
JetBrains Left a Critical Flaw Unpatched. Attackers Walked Off With AWS Keys.
JetBrains suffered a security breach of its Cadence cloud computing service after unidentified attackers exploited a critical unpatched TeamCity vulnerability (CVE-2026-63077, CVSS 9.8), gaining unauthorized access between August 8–24, 2026. The attackers extracted sensitive data including personal user information, a full 2024 Cadence server backup containing AWS IAM credentials, S3 bucket files, and potentially users' PyCharm project source code. JetBrains is urging all affected Cadence users to immediately revoke and rotate credentials, audit connected cloud services and repositories for suspicious activity, and treat all past executions as potentially compromised.
Trezor's Shipping Partner Kept Data It Promised to Delete. 67,000 Customers Are Now Paying the Price.
Trezor has disclosed that a breach at its shipping provider ShipMonk exposed the personal data of 67,000 U.S. customers, including names, addresses, phone numbers, and order details from 2019–2021 — data Trezor had repeatedly been assured was deleted. The breach stemmed from a zero-day SQL injection vulnerability (CVE-2026-72898) in Metabase, with the ShinyHunters extortion gang reportedly responsible. While the hardware wallets themselves remain secure, Trezor has warned affected customers to be vigilant against phishing, scam calls, and social engineering attacks exploiting the leaked information.
ShareFile Shutdown Orders, Citrix Bleed 2 Ransomware, and AI Coding Assistants You Can't Trust
This weekly cybersecurity recap highlights a recurring theme: attackers are exploiting the same ordinary vulnerabilities faster than defenders can patch them, using the same AI-powered tools now available to security teams. Key incidents include Progress urging ShareFile customers to shut down Storage Zone Controllers due to an unspecified external threat, active exploitation of Citrix Bleed 2 to deploy DragonForce ransomware, a compromised Jscrambler npm package stealing developer credentials, and a new attack technique called HalluSquatting that tricks AI coding assistants into installing malicious code. The recap also covers a broad range of trending CVEs, new malware families, and emerging threat groups, underscoring that the gap between patch availability and active exploitation continues to narrow.
Stadler Rail Tells Ransomware Gang to Take a Hike on a CHF 10 Million Demand
Swiss rail manufacturer Stadler Rail refused a CHF 10 million ransom demand from the Everest ransomware gang after attackers accessed technical data from a supplier via a shared data exchange platform using compromised credentials. The company stated that no personal or security-relevant data was affected and that its own IT systems remained fully intact. Unusually, Stadler has not appeared on Everest's data leak site despite refusing to pay, which departs from the typical ransomware extortion playbook.
7,600 Fake GitHub Repos Are Hunting Developers and AI Agents Alike
A cybersecurity campaign called **FakeGit** has created nearly 7,600 malicious GitHub repositories — over 800 of which impersonate AI tools or Model Context Protocol (MCP) servers — to distribute **SmartLoader malware**, which then deploys the **StealC** information stealer on victims' systems. The campaign uses copied projects, fake developer profiles, and deceptive README files to trick users into downloading malicious ZIP files. A particularly alarming evolution called **AgentBaiting** allows AI agents (including Claude, Gemini, and ChatGPT) to independently discover and act on these fraudulent repositories without any human involvement, meaning the attack no longer requires a victim to click a link.
North Korean Hackers Hijack 108 Packages Across npm, Go and Chrome in Sprawling PolinRider Campaign
North Korean threat actors linked to the Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome as part of an ongoing operation called PolinRider, which has compromised nearly 2,000 public GitHub repositories. The attackers use obfuscated JavaScript payloads, fake font files, and VS Code task files to deliver malware including BeaverTail, DEV#POPPER RAT, and OmniStealer, while rewriting Git history to make malicious changes appear legitimate and harder to detect. Developers are advised to treat any affected environments as fully compromised, rotate secrets, rebuild from clean lockfiles, and audit repositories for suspicious modifications to configuration files.
Supply Chain Attack Hits Packagist: Eight PHP Packages Compromised via GitHub-Delivered Malware
Eight packages on Packagist, the primary dependency registry for PHP projects, were quietly backdoored in a supply chain attack that used GitHub infrastructure to serve Linux malware.
Megalodon Attack Poisons Thousands of GitHub Repos via CI/CD Hijacking
Someone has been systematically targeting GitHub repositories at scale.
Typosquatting Has Outgrown the User Error Excuse
Typosquatting was once seen as a relatively simple phishing threat: a user mistypes a domain, lands on a malicious site, and becomes compromised. That model is now outdated. Modern typosquatting has moved beyond browsers into software package registries, dependency managers, and CI/CD pipelines, making it a software supply chain security issue rather than a user-awareness problem.
A Poisoned VS Code Extension Just Breached 3,800 GitHub Repositories
GitHub has confirmed that approximately 3,800 internal repositories were compromised after an employee installed a malicious VS Code extension, which was subsequently removed from the VS Code Marketplace and the affected device secured. The hacker group TeamPCP has claimed responsibility, advertising the stolen data on a cybercrime forum for at least $50,000, though GitHub states there is no evidence that customer data outside the breached repositories was affected. This incident is part of a broader pattern of malicious VS Code extensions targeting developers, with TeamPCP also previously linked to supply chain attacks on platforms including PyPI, NPM, and Docker.
OpenAI Hit by TanStack Supply Chain Attack After Two Employee Machines Infected
OpenAI confirmed it was caught up in the "Mini Shai-Hulud" npm supply chain attack, in which malware hidden in compromised TanStack packages reached two employee devices and allowed attackers to steal a limited amount of internal credentials. The two affected machines had not yet received updated supply chain security controls that would have blocked the malicious dependency. As a precaution, OpenAI is rotating signing certificates for several desktop products — including ChatGPT Desktop, Codex App, and Codex CLI — and says there is no evidence that customer data or production systems were compromised.