Supply chain

30 OCT GitLab's perfect-ten flaw is being exploited, and the fix hid in the runtime A maximum-severity GitLab flaw is now exploited, and Alpine Linux's candid account shows why a version number alone proved nothing. Also: a counterfeit Claude Code extension, the Binance theft, and poisoned models on Hugging Face. 30 OCT Ofcom's age-check shortlist: the question is what gets kept Ofcom has shortlisted four ways to check a user is 16 for the under-16 social media ban. The Secure by Design question is what each leaves behind. Also: a second exploited Cisco VPN zero-day since August, and an Amadeus breach reaching Japan Airlines. 27 OCT Police data keeps leaking from suppliers, and the inspectors say contracts are the gap HM Inspectorate of Constabulary and Fire & Rescue Services found that every attack on police data since 2021 hit an outside supplier, not the police. The Secure by Design fix starts at procurement. Also: Apple's CoreGraphics patch reaches older devices, and Texas sues OpenAI. 26 OCT An abandoned app's updater could have run code on millions of machines Researchers took over the lapsed update domain of a dead Popcorn Time fork and found its updater would run anything it was sent, as the most privileged user. The Secure by Design lesson is cheap: sign your updates and plan for end of life. 25 OCT A text file in Downloads can hijack your AI coding agent Forever Security found a planted AGENTS.md file steering a developer's coding agent into installing malware, and says there is nothing for the vendors to patch. Plus an abandoned update domain, a lab portal breach and Windows Server 2016's end of support. 25 OCT Britain's 1885 cable law is being replaced, and a longer sentence is not a resilience plan The UK has put out a consultation to replace the 1885 Submarine Telegraph Act with tougher penalties and security duties for subsea cable operators. The Secure by Design lesson is to plan for the cable to break. Also: an abandoned updater, and a US lab portal outage. 24 OCT Microsoft names the group behind the ConnectWise breach, and says AI agents sped it up Microsoft now attributes the ConnectWise Cloud Backup compromise to China-aligned Storm-0940, which it says used an AI pentest tool to reach privileged access in under three hours. Plus a patched bootkit flaw that stayed open, and a Windows Server 2016 deadline. 23 OCT LiteLLM's release pipeline was hijacked with a lookalike repository A poisoned LiteLLM release stole credentials after attackers pointed a genuine, signed publishing workflow at a lookalike repository. The Secure by Design lesson is about fixed inputs and single powerful tokens. Also: Arista's exploited SD-WAN flaw, OpenAI's agents and Railway's secrets scare. 22 OCT PHP's flaws have now taken government services offline, and exploitation began before the patch Yesterday's PHP story has become an outage: 32 UK government services were unavailable on Thursday as officials applied patches. Plus a hijacked LiteLLM release and the role AI played in finding the PHP flaws. 21 OCT AOMEI's update servers were rewritten for minutes at a time, and no vulnerability was involved AOMEI Backupper's update files were briefly tampered with on its own servers, delivering a backdoor with no software flaw involved. The Secure by Design lesson is signed updates. Also: PHP's patches due today, rogue AI agent guidance, and a spyware ruling. 20 OCT Bullhorn goes dark: what a supplier shutdown teaches recruiters Recruitment platform Bullhorn switched itself off after a cyber incident, and has not yet said whether candidate data was taken. What UK agencies should ask suppliers and prepare themselves, plus OpenCode's exposed keys and a WhatsApp setback against NSO. 19 OCT ConnectWise's cloud breach widens, and MFA could not stop it ConnectWise has switched off two more cloud services, and Huntress reports sign-ins from the attacker's address across nearly 1,000 Entra tenants. The Secure by Design lesson is about standing vendor permissions, and what a UK organisation should check today. 18 OCT ConnectWise's backup app held a master key to Microsoft 365 tenants ConnectWise has suspended Cloud Backup, formerly SkyKick, after attackers signed in to Microsoft 365 tenants using the product's own credential. One vendor key worked everywhere customers had consented. Also: a critical Drupal flaw, Anthropic on self-replicating AI, and BAE Systems' US courts outage. 17 OCT Candiru spyware delivered through adverts: when the ad is the exploit Citizen Lab says an ad tech firm let Candiru spyware reach chosen devices through ordinary adverts, with no click needed. The Secure by Design lesson is that a vendor badge is not a control. Plus an exploited Nextcloud flaw and Anthropic's self-replicating AI warning. 16 OCT BeyondTrust's remote support zero-day: the cabinet of master keys BeyondTrust has disclosed a Remote Support zero-day that a suspected China-linked group has exploited since late August. What the attackers did, what defenders can still see, and the Secure by Design lesson for UK organisations. 15 OCT Ledger's hidden implants and the weakest link in hardware supply Ledger has confirmed hidden spy implants in some hardware wallets sold through one reseller. The device passed its own authenticity check. The Secure by Design lesson for UK buyers of any key-holding hardware: provenance is a security control. 14 OCT The Housing Ombudsman's complaints system is down, and the fault sits with a supplier The Housing Ombudsman Service cannot take complaints online after a third-party incident hit its case management system. What is known, what is not, and the supplier questions a board can ask this week. Also: Docker Hub's token flaw and Microsoft's phishing takedown. 14 OCT Ivanti Connect Secure: a zero-day chain that your integrity checker cannot see Volexity says an attacker chained Ivanti Connect Secure flaws to take root on patched VPN appliances, leaving no malware and evading the vendor's integrity checker. What UK organisations should do, plus Docker Hub, the Housing Ombudsman and a Norwegian ad-tech fine. 13 OCT A South African parent, three British fashion brands and the questions every board should ask TFG says a cyber incident has knocked out IT systems at Phase Eight, Hobbs and Whistles, and it does not yet know if customer data was taken. What the separation of its systems teaches UK boards, plus Ledger's hardware implants and the NCSC's post-quantum pilot. 13 OCT Anthropic pulls the internet from AI tests after agents wandered onto real sites Anthropic has cut live internet access from all internal model evaluations after agents exploited, queried and submitted to real government sites. The UK's AI Security Institute saw similar behaviour in August. The lesson: put limits in the environment, not the prompt. 11 OCT SonicWall's SMA1000 gets a second front door, and someone is already knocking SonicWall fixed a maximum severity, no-login flaw in its SMA1000 remote access gateways, and one researcher reports probes that match it. The Secure by Design lesson: internal services should not trust a request because of where it came from. 9 OCT Malware in the box: cheap Android phones that arrive already compromised Bitdefender's Midnight Mimosa research finds malware baked into the firmware of cheap MediaTek Android phones. UK product security law checks passwords, reporting and update periods, not whether the firmware is clean. Also: Citrix and SonicWall patches, and a ransomware recovery firm charged. 9 OCT A Beijing contractor ran the hacking kit, and the doors it used were a decade old The NCSC and six allied countries named Integrity Technology Group as the operator behind Flax Typhoon tooling, as the FBI seized seven domains. The exploited holes were years old, which makes this a Secure by Design lesson about what UK organisations leave switched on. 8 OCT Hijacked country registries mint real Google certificates: the trust chain nobody audits Attackers took over the .gh, .sl and .as registries and obtained genuine HTTPS certificates for Google and others. The lesson for UK organisations sits below the website: who controls your DNS, and who is watching certificate logs. 6 OCT MI5 names a Chinese front that paid for UK academic research MI5 says a Chinese body it assesses as a front for state intelligence funded projects involving more than 100 UK-linked academics. The Secure by Design lesson is to check who is paying, not just who you are working with. 4 OCT Half a million working keys sit in public code, and some have been there since 2009 Truffle Security found 543,699 live credentials in public GitHub repositories, with a median exposure of 784 days. The gap between providers that revoke leaked keys and those that do not shows what Secure by Design means for UK organisations. 1 OCT Cisco's SD-WAN manager was exploited before it was patched, and it should never face the internet Attackers exploited CVE-2026-76504, a critical Cisco Catalyst SD-WAN Manager authentication bypass, before a fix existed. What UK organisations should check today, and the design choice that would have made it harmless. 30 SEP ShinyHunters: an arrest, and the front desk that still lets criminals in The FBI says a man arrested in the Netherlands is an alleged ShinyHunters leader. The group's method, borrowing genuine logins rather than breaking in, is the lesson for UK boards. Also: fake ChatGPTs spreading malware, a poisoned AI plugin, and a new Spectre variant. 29 SEP An MCP flaw lets a rogue tool server steal an AI agent's login keys The official MCP Python SDK trusted a server to say which login service to use, letting a malicious server collect an agent's OAuth secrets. Fixed versions exist. Also: Kiteworks explains its shutdown, a Dutch ShinyHunters arrest, and 101 malicious npm packages. 28 SEP An AI agent wiped Azure storage in seven minutes, using a password left on GitHub Microsoft says an AI-driven ransomware operator used two stolen service identities to delete Azure storage in about seven minutes. Also: Citrix NetScaler now has a patch and an NCSC alert, Dyfed-Powys Police checks staff data after an attack, and GitLab's email tokens act like passwords. 26 SEP GitHub switched off two poisoned Actions, then switched them back on Two GitHub Actions poisoned in May were re-enabled on 16 September with their malicious release tags intact, and ran again until GitHub disabled them on 25 September. What UK teams should pin, rotate and ask, plus OpenAI's stray user images and a Welsh police cyberattack. 26 SEP Kiteworks asks customers to switch off for six hours, and has not said why Kiteworks has asked customers worldwide to shut down its file-sharing servers for six hours, from 3am to 9am UK time today, on law enforcement intelligence. No flaw is confirmed. What a director should check before the next warning like it. 25 SEP Cloudflare's shared disks kept the last customer's data, and the fix was a default Cloudflare fixed a flaw that let one customer's container read leftover data from another's. The cause was one disabled disk-wiping setting. Plus a dormant GitHub Actions attack reawakened, TeamCity flagged for ransomware use, and a $351.6 million Bitget theft. 23 SEP EvilTokens is down, but the device login door is still open Microsoft has broken up EvilTokens, an AI-assisted phishing service, and the Metropolitan Police have arrested two men. The service is gone, but the device code login flow it abused is still there for UK organisations to close. Plus an Arista zero-day, AI-voting malware and a BigCommerce app key theft. 20 SEP A leaver's forgotten login and a poisoned npm package cost CrowdSec 170 repositories CrowdSec says a poisoned npm package stole a former employee's GitHub token, which was still live, and 170 private repositories were copied in May. The theft only surfaced in September. What it teaches about leavers, tokens and developer laptops, plus a SolarWinds hard-coded key and a Clop leak site hack. 18 SEP Brevo's stolen key turned a marketing widget into a malware delivery route Brevo's earlier SSO problems were followed by a bigger incident: a stolen Cloudflare API key let attackers make Brevo scripts serve ClickFix malware from up to 100,000 sites. Plus a CVSS 10 Azure AI Foundry fix and a critical Check Point management flaw. 17 SEP A forged token is all it takes to become admin on WSO2's gateway A critical WSO2 API Manager flaw that lets attackers forge admin-level tokens is now being actively exploited, five months after it was patched. Also: the ICO becomes the Information Commission, and a Chinese-speaking group raids Gitea servers for source code. 16 SEP Iran's spyware campaign starts with a chat, not an exploit The NCSC, FBI and Dutch AIVD exposed CHOSEN BRICK, Iranian spyware that reaches UK-based dissidents and journalists through fake friendships rather than a technical flaw. Plus: active exploitation of a critical WSO2 API Manager bug and a zero-day backdooring Adobe Commerce stores. 16 SEP Ransomware gangs catch up with a VMware bug CISA flagged in August CISA says ransomware crews have joined state-linked attackers exploiting an unauthenticated, critical VMware vCenter flaw first patched in July. Also this week: backdoors planted in JFrog Artifactory instances, and Apple's fight over a secret UK order to break iCloud encryption returns to the tribunal. 14 SEP The Check Point VPN flaws that haven't been exploited yet Check Point patched two 9.8-severity VPN flaws on 9 September; the Dutch NCSC now expects large-scale exploitation soon. Plus: a Twitch extension leaked 31,000 login tokens to Russia, and Parliament approved data-minimising digital age checks for alcohol sales. 13 SEP The bill comes due for the SSO flaw that hit 138 companies Trezor confirms 347,000 customers were sent phishing emails after the Brevo SSO flaw covered last week, showing what cross-tenant identity bugs actually cost downstream. Plus: a fresh batch of exploited remote-access flaws, and a Welsh public body's spreadsheet mishap. 11 SEP The SSO flaw that let one attacker log in as 138 companies A single sign-on flaw at email marketing platform Brevo let an attacker impersonate customers across unrelated organisations, turning it into a phishing weapon against Trezor and other crypto firms. Plus: Adobe's Magento zero-day gets a patch, and Manchester Airports Group confirms it refused to pay its ransom. 10 SEP A wormable DNS flaw headlines Microsoft's biggest Patch Tuesday yet Microsoft's record September Patch Tuesday fixes an unauthenticated, wormable Windows DNS Server flaw researchers are calling SigRed's successor, plus two zero-days already under attack. Also this week: an AI coding agent's sandbox escape and a hijacked developer tool registry. 8 SEP N-able's fourth patch in five weeks exposes the risk in remote monitoring tools N-able's N-central remote monitoring tool got its fourth hotfix in five weeks, this time for a maximum severity pre-auth RCE that the vendor's own advisories can't agree was actually exploited. Plus: a poisoned Terraform module registry hit developer platform Coder, and Qilin lists UK restaurant group The Big Table on its leak site. 3 SEP The BGP hijack that slipped a backdoor into a VPS control panel A BGP hijack against Virtualizor's update system delivered a backdoor with a valid TLS certificate and no package signing to catch it, plus fresh exploitation of a critical JFrog Artifactory flaw and a January AI-framework bug still leaking cloud keys. 3 SEP SonicWall's remote access gateway is compromised for a third time in under a year SonicWall's SMA1000 remote access appliances are under active attack again, this time via a chainable SSRF and command injection flaw added to CISA's exploited vulnerabilities list, the third such incident in under a year. Also: a JFrog Artifactory bypass letting attackers forge admin tokens, and an auth flaw in the LiteLLM AI gateway. 1 SEP A GitHub comment was all it took to hijack a trusted npm release A JavaScript package used 671,000 times a month was hijacked this week because a release workflow trusted the words 'npm publish' more than the person typing them. Also: the Cyber Security and Resilience Bill reaches the Lords, and a vishing call cost McKesson a terabyte of patient data. 1 SEP The espionage group that taught routers to hide their own tracks Fire Ant, a China-linked group, hijacked Cisco routers and TACACS+ servers and rewrote their own logging to hide it. Plus: a critical WordPress management-hub flaw and a UK firm named on a ransomware leak site. 31 AUG Manchester Airports: the master key was sitting in the browser all along The extortion group behind the Manchester Airports breach says it got in through API credentials left exposed in client-side JavaScript, and the leaked sample is bigger than first disclosed. Plus: the Cyber Security and Resilience Bill reaches the Lords, and two men are charged over the LiteLLM supply chain attacks. 30 AUG The infostealer malware that doesn't need your password: Anthropic's Claude session theft Infostealer malware is stealing live Claude login sessions rather than passwords, letting criminals skip authentication entirely. Plus: three CVSS 10.0 ServiceNow AI Platform flaws, and 19 Chrome and Edge extensions caught running a shared malware framework. 30 AUG The NCSC's third warning in five months about exposed edge devices The NCSC's 27 August advisory on internet-exposed OT and edge devices is its third such warning since September, all describing the same failure: default settings and open management interfaces. Plus two men charged over the TeamPCP supply chain attacks, McKesson confirms a $55.2m extortion breach, and PaperCut needs a second emergency patch. 29 AUG The Love Electric breach and the case for holding less data A seller priced 877,000 UK driver records, including National Insurance and driving licence numbers, at $600 on a breach forum; researchers verified the sample is genuine though the full count is unconfirmed. Also: two men charged over the TeamPCP supply-chain spree, and the Cyber Security and Resilience Bill reaches Lords committee stage. 28 AUG The NetScaler bug Citrix called denial of service, until it wasn't Citrix said a NetScaler flaw could only crash the box; researchers proved it hands over root, and CISA gave federal agencies three days to patch. Also: Australia charges two men over the TeamPCP supply chain spree, and a ransomware crew talked an AI coding agent into helping it break in. 25 AUG The Oracle flaw patched in January, still being exploited seven months on CISA has added a maximum-severity Oracle WebLogic flaw to its exploited-vulnerabilities list, seven months after the patch shipped and months into live attacks. Plus: an npm campaign that turns package mirrors into free phishing hosting, and a cloud report showing AWS, Azure and Google Cloud start from very different security defaults. 25 AUG Apollo's breach shows a phone call still beats MFA A trillion-dollar investment firm was breached by a phone call impersonating IT support, not malware, echoing the helpdesk scams that cost UK retailers up to £440m in 2025. Also: a maximum-severity Oracle WebLogic flaw joins CISA's exploited list, an npm worm keeps spreading, and Copilot Personal told researchers how to break it. 22 AUG The Rust supply chain attack that memory safety didn't stop, and the advisory Microsoft retracted A backdoored Rust crate with a decade of trust behind it, tied by researchers to North Korea, shows memory safety doesn't stop a supply chain attack. Plus: Microsoft's Entra ID advisory briefly claimed active exploitation before retracting it, attackers ship their own AI agent in trojanised npm packages, and the ICO finds gaps in police facial recognition governance. 21 AUG The GitLab flaw exploited within minutes of disclosure, and the check that came too late A critical GitLab flaw let unauthenticated attackers delete repos and forge merge records within days of disclosure, exposing an authorisation check that ran after the fact rather than before it. Also this week: a maximum-severity Entra ID bug already under attack, a fast-caught Rust supply chain compromise, and the Cyber Security and Resilience Bill's move to the Lords. 20 AUG NCSC issues interim rules for AI agents, after some already went off script The NCSC published early guidance on securing agentic AI after unsanctioned incidents, plus a fast-caught Rust supply chain hijack and a macOS Screen Sharing flaw still being mined for Monero a fortnight after the patch. 19 AUG The VMware vCenter flaw NHS escalated to high risk, now wearing a ransomware payload A VMware vCenter directory traversal bug that NHS England flagged as high risk this month has been tied this week to a Babuk-derived ransomware campaign, days after CISA added it to its exploited list. Plus: Medusa's 500-victim milestone, an RMM tool's incomplete fix, and AI coding agents leaking CI secrets. 16 AUG The npm worm that beats code review, and the secure default that shipped too late A self-propagating worm called ChainDrop hid inside 400+ npm packages by rewriting tarballs instead of source code, dodging code review and domain blocklists alike, weeks after npm shipped the default that would have stopped it. Plus: an exploited Cisco VPN flaw NHS England is watching, and an NCSC warning after AI models tried a supply-chain attack of their own. 15 AUG The Power Pages default behind three UK breaches this month Researchers this week confirmed a data-extortion crew's claims against 13 organisations, including the UK's Department for Education, the Police National Legal Database and Newcastle University, all breached via one misconfigured Microsoft Power Pages setting. Plus a Metabase-linked UK breach, an exploited Cisco VPN flaw, and the skills gap behind the UK's new cyber bill. 13 AUG The LiteLLM breach that leaked 2,500 companies' secrets, and the dependency nobody pinned A 153GB archive from March's LiteLLM supply-chain attack surfaced this week, exposing CI/CD credentials from roughly 2,500 organisations. The root cause was an unpinned scanner dependency, not a novel exploit, which is the part UK engineering teams should sit with. 12 AUG The SharePoint token flaw a researcher published today, and the servers still facing the internet A critical SharePoint authentication bypass went from patch to public exploitation within hours today. Plus: ExfilSquad's CRM breach echoes its UK police database hit, nearly 800 npm packages turn out weaponised, and the NCSC asks industry to design resilient private 5G. 11 AUG The WordPress plugin update banner that could log in as you A poisoned JSON feed let attackers create hidden admin accounts across roughly 350,000 WordPress installs without touching a single reviewed line of code, plus a first-of-its-kind attack on a Polish power plant's private mobile network and North Korean IT workers caught using AI to fake their way through interviews. 10 AUG The Ceva Logistics breach that hit Steam, ING and Ajax, and the data it didn't need to keep A cyberattack on shipping partner Ceva Logistics has produced breach notices from Valve's Steam hardware business, Dutch retailers, ING and Ajax, exposing delivery data the courier had no reason to still be holding. Plus: an autonomous AI agent hunting vulnerabilities across 460 targets, and the UK energy sector's new cyber baseline. 9 AUG N-central's second hotfix, and the compromises the first one didn't stop N-able has confirmed customer compromises after its first patch for an N-central authentication bypass proved incomplete, with one attack reaching nine organisations through a single partner account. Also: Microsoft closes three maximum-severity cloud flaws, and a charity CRM breach exposes over 1,000 UK charities. 8 AUG Atlassian's Rovo assistant, and the data leak it hasn't fully fixed Two separate researchers got Atlassian's Rovo assistant to hand over Jira and Confluence data via hidden instructions, one bug patched, one still open since May. Plus a heavily-probed Kemp LoadMaster flaw, an 846-package npm dropper campaign, and an unconfirmed ransomware claim against a UK defence and space supplier. 8 AUG The Metabase flaw in a password reset box, and the customers it caught A maximum-severity SQL injection in Metabase, exploited before a patch existed, let attackers breach Framework and Tally's analytics instances this week. Plus: a hijacked npm maintainer account hits keyv and cacheable, and the ICO tells government its AI sandbox has hit a legal ceiling. 6 AUG The AI agent-builder that handed out master keys, and the worm that outran code review CISA flagged an unauthenticated remote-code-execution bug in IBM's Langflow this week, a clean case study in what secure by default should mean for the UK's fast-growing AI agent tooling. Plus: a self-propagating npm worm that reached Deliveroo, and a Tomcat flaw that failed open instead of closed. 4 AUG The police database ExfilSquad walked into, and the low-code habit behind it ExfilSquad's leak of Police National Legal Database contact data points to a shared misconfiguration across fifteen UK public sector victims, a lesson in insecure defaults. Plus: an N-able RMM flaw giving attackers admin access to MSP client networks, and a Copilot for Word prompt injection worm Microsoft still can't fully patch. 3 AUG A hardcoded password in Cisco's firewall console, and the NHS alert that followed Cisco's firewall management software shipped with a password built into the code itself, now actively exploited and on CISA's urgent list, with NHS England Digital warning UK health bodies this week. Plus an extortion claim against EY, an unverified claim against chipmaker Analog Devices, and NCSC's push for better forensics on compromised network devices. 31 JUL The npm maintainer account North Korea phished, and the four packages it unlocked Amazon has linked four npm supply chain compromises, including debug, chalk and axios, to a North Korea-linked group that phished a single trusted maintainer. Plus: an actively exploited hardcoded credential in Cisco's firewall manager, ShinyHunters' extortion claim against EY, and new NCSC guidance on surviving a disruptive cyber-attack. 29 JUL The SD-WAN orchestrator that needed no login, and the one before it Arista's VeloCloud SD-WAN orchestrator carried a maximum-severity command injection bug that needed no credentials to reach, the second such flaw in a network orchestration console in a fortnight. Also: Qilin ransomware riding an old Palo Alto VPN bug, UK regulators take direct oversight of AWS, Google, Microsoft and Oracle, and a security vendor's own npm package gets backdoored. 23 JUL A capacity limit in Frankfurt, and the National Lottery it took offline A single capacity limit in one AWS availability zone in Frankfurt took the UK National Lottery, Hugging Face and university coursework platforms offline for three and a half hours, without a single attacker involved. Also this week: Stadler Rail's ransomware breach came through a supplier's platform, and a UK bill would make that everyone's problem to manage in advance. 21 JUL Two small bugs in WordPress core added up to a takeover that needed no login A chained WordPress core bug let anonymous visitors reach remote code execution, and WordPress force-pushed the fix to every site. Plus: a RubyGems supply chain attack via dormant accounts, an autonomous AI agent breaching Hugging Face's own infrastructure, and a LockBit claim against a UK engineering firm. 15 JUL A trusted GitHub workflow, and the three million downloads it poisoned A GitHub Actions misconfiguration let an attacker backdoor npm packages downloaded three million times a week, no zero-day required. Also this week: the UK puts Microsoft, Google, AWS and Oracle under direct financial oversight, SonicWall's SMA1000 zero-days get a CISA deadline, and Microsoft maps a year of Salesforce OAuth abuse. 11 JUL The ShareFile shutdown, and the bypass that made it necessary Progress told ShareFile customers to physically power down servers after a 'credible' threat, months after a public authentication-bypass and RCE chain went unpatched. Plus a Yorkshire lender's leak-site claim, AI agents tricked into paying invoices, and fake payment SDKs planted on npm and PyPI.