Search: “Shai-Hulud”

39 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 39 Vulnerability 24 Data breach 20 Ransomware 17 Threat actor 9 Exploit / PoC 7 Policy & legal 3 Phishing & fraud 2 AI safety & security 2 Advisory 1 Research 1 Tools 1

SeverityAll critical 39 high 69 medium 13 low 1 info 4

Shai-Hulud worm returns stronger and more automated than ever before

CyberScoopNov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild

60

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply

CyberScoopMay 12, 21:38 UTC · May 12, 2026Malware1

55

Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets

The Hacker NewsNov 27, 03:43 UTC · Nov 27, 2025Threat actor1

60

Massive supply-chain attack compromises 440 packages under four hours

CyberScoopAug 4, 22:07 UTC · Aug 4, 2026Exploit / PoC

60

Mini Shai-Hulud returns, compromising hundreds of npm packages

CyberScoopMay 19, 21:21 UTC · May 19, 2026Data breach in the wild

60

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

The Hacker NewsNov 25, 03:51 UTC · Nov 25, 2025Vulnerability

55

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60

Unit 42 Threat Bulletin

Palo Alto Unit 42Mar 16, 11:16 UTC · Mar 16, 2026Ransomware

60

Developer Workstations Are Now Part of the Software Supply Chain

The Hacker NewsMay 18, 11:23 UTC · May 18, 2026Threat actor1

60

SAP-Related npm Packages Compromised in Credential

The Hacker NewsApr 30, 16:39 UTC · Apr 30, 2026Data breach

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

Malware is targeting AI tools in software development environments

CyberScoopJul 22, 17:24 UTC · Jul 22, 2026Malware in the wild1

60

A Record-Breaking Patch Tuesday for June 2026

Krebs on SecurityJun 10, 01:28 UTC · Jun 10, 2026Vulnerability CVE-2026-49160 CVE-2026-45586 CVE-2026-50507

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

The Hacker NewsMay 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-31431 CVE-2026-3854+2 CVEs1

60

2026: The Year of AI

The Hacker NewsMay 4, 11:58 UTC · May 4, 2026Ransomware

60

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

The Hacker NewsOct 2, 12:19 UTC · Oct 2, 2025Vulnerability CVE-2025-10184 CVE-2024-364011

60

Growing Up The Hard Way

The Hacker NewsAug 7, 11:55 UTC · Aug 7, 2026Vulnerability1

55

Why metaphor may dictate your security strategy

Cisco TalosAug 6, 18:00 UTC · Aug 6, 2026Vulnerability1

55

Security Affairs newsletter Round 583 by Pierluigi Paganini – INTERNATIONAL EDITION

Security AffairsJul 4, 23:02 UTC · Jul 4, 2026Ransomware CVE-2026-47729 CVE-2026-20971 CVE-2026-20245+1 CVEs

60

Agentic attack chains advance as infostealers flood criminal markets

Help Net SecurityJun 19, 12:05 UTC · Jun 19, 2026Malware in the wild

60

GitHub Breach Traced to Malicious ‘Nx Console’ VS Code Extension

Infosecurity MagazineMay 21, 14:45 UTC · May 21, 2026Data breach CVE-2026-480271

60

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

The Hacker NewsMay 20, 16:10 UTC · May 20, 2026Data breach

60

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability CVE-2026-03001

60

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

55

How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers

The Hacker NewsApr 8, 10:59 UTC · Apr 8, 2026Vulnerability1

55

ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

Security AffairsMar 12, 08:49 UTC · Mar 12, 2026Advisory CVE-2025-55182

60

Exploitable Vulnerabilities Present in 87% of Organizations

Infosecurity MagazineFeb 26, 14:00 UTC · Feb 26, 2026Vulnerability in the wild

60

Low-Skilled Cybercriminals Use AI to Perform “Vibe Extortion” Attacks

Infosecurity MagazineFeb 17, 13:45 UTC · Feb 17, 2026Ransomware in the wild1

60

Researchers Uncover 454,000+ Malicious Open Source Packages

Infosecurity MagazineJan 28, 11:00 UTC · Jan 28, 2026Vulnerability

55

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

Security AffairsJan 28, 08:43 UTC · Jan 28, 2026Exploit / PoC1

60

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Exploit / PoC CVE-2025-69264 CVE-2025-69263

60

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories

The Hacker NewsDec 4, 16:05 UTC · Dec 4, 2025Phishing & fraud

55

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Security Affairs newsletter Round 552 by Pierluigi Paganini

Security AffairsNov 30, 15:30 UTC · Nov 30, 2025Ransomware CVE-2025-59287

60

Malicious package with AdaptixC2 framework agent found in npm registry

Kaspersky SecurelistOct 17, 10:00 UTC · Oct 17, 2025Malware

55

Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at risk

Help Net SecuritySep 28, 00:00 UTC · Sep 28, 2025Exploit / PoC CVE-2025-10035 CVE-2025-59689 CVE-2025-26399+1 CVEs

60