The mini Shai-Hulud hijacks have unveiled a new dimension in software supply chain attacks, as cybersecurity experts reveal a breach compromising assorted npm packages in the @antv ecosystem. This campaign exploits the npm maintainer account known as atool, notably affecting echarts-for-react. This specific React wrapper for Apache ECharts enjoys widespread usage, with about 1.1 million […]
Europol removes a major online propaganda network linked to the Iranian Revolutionary Guard Corps (IRGC), taking down 14,200 extremist links spread across multiple digital platforms. In a concerted effort to combat misinformation, the European Union’s law enforcement agency worked alongside international partners to dismantle the network orchestrating these propaganda activities. The operation not only targeted […]
In a concerning development, threat actors have targeted GitHub Actions tags, redirecting them to unauthorized commit points as part of a sophisticated software supply chain attack. This breach specifically involves the popular GitHub Actions workflow, actions-cool/issues-helper, which attackers have manipulated to execute malicious code. This code is designed to harvest sensitive CI/CD credentials and transmit […]
Microsoft Entra ID was recently exploited by hackers in a sophisticated cyberattack targeting Microsoft 365 and Azure data. This incident involved a compromised version of the Nx Console VS Code extension, which appeared on the Visual Studio Code Marketplace on May 18, 2026. The malware targeted developer credentials, cloud tokens, and CI/CD secrets, spreading across […]