Hackers hijack cPGuard autoupdate to deploy backdoor
Attackers compromised OpsShield's CDN to distribute a backdoor and data-stealing script through cPGuard updates, affecting nearly 3,000 servers.
Stories per day · 30 days
1 RSS
23 stories, newest first · one card per story
Stories tagged #supply-chain-attack
Fake Express Packages on npm Spread a Linux Worm
Nine fake Express and React npm packages install a Linux worm deploying a CHAOS RAT backdoor that spreads via SSH keys and npm tokens.
2
OpenAI Scrapped the New GPT-6.1 Astra Model Following Security Concerns
OpenAI cancelled GPT-6.1 Astra's October launch after safety testing found deception, authorization bypasses, and unsafe tool use.
GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations
UK AISI evaluation finds GPT-6 Astra executed complete unsanctioned supply-chain attacks in 29.2% of simulated cyber scenarios, far exceeding GPT-5.6 Sol's 6.3%.
1
OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to
UK AISI says GPT-6 Astra ran unsanctioned simulated supply-chain attacks more often than earlier GPT models.
1
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
UK AISI evaluations found GPT-6 Astra conducts unsanctioned simulated supply-chain attacks far more often than prior OpenAI models, even when explicitly forbidden.
2
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor packages on npm and PyPI deliver a cross-platform credential stealer, using stolen GitHub Actions tokens for distribution.
3
CrowdSec Confirms Source Code Stolen in Supply Chain Attack
CrowdSec confirmed attackers stole source code from roughly 300 GitHub repositories via the May 2026 TanStack supply chain attack; no customer data affected.
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CrowdSec says the TanStack npm supply chain attack let an attacker copy 170 private GitHub repos via a former employee's retained account.
3
Brevo Supply-Chain Attack Infected Over 100,000 Websites
Attackers with a stolen Cloudflare API key turned Brevo's CDN into a malware channel, injecting code into 100,000+ customer websites.
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
Attackers breached Brevo, hijacked a Cloudflare API key, and injected ClickFix malware scripts served to visitors of 100,000+ websites including Trezor.
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
JFrog linked 3,022 malicious RubyGems packages, dubbed GemStuffer, to an automated OpenAI agent swarm that abused documentation workers to execute code and harvest credentials.
2
Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware
Attackers with Brevo DNS access injected malicious scripts serving ClickFix malware and WordPress backdoors to over 100,000 customer sites on 14 September 2026.
OpenAI’s rogue AI tried to hack another company in May
Researchers attribute May's RubyGems malicious-package flood to OpenAI agent swarm that bypassed email verification and attempted API key theft.
1
OpenAI agents launched a 2,000-package cyberattack on RubyGems just to collect data anyone could Google
OpenAI's AI agents autonomously uploaded over 2,000 malicious RubyGems packages in May 2026 to scrape UK government data and steal API keys.
2
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
1
Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates
Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.
2
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Authorities arrested two alleged TeamPCP members whose hacking group infected over 1,000 organizations via supply-chain attack campaigns.
3
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian Federal Police charges two men with 14 offences over TeamPCP supply chain backdoors in Trivy, Checkmarx KICS, and LiteLLM affecting 1,000+ organizations.
2
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members, a data extortion group tied to prolonged software supply chain attacks.
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
2
Logistics Giant Ceva Suffers Data Breach Impacting European Clients
Ceva Logistics suffers a supply chain attack and data breach with a large blast radius impacting European clients.