TeamPCP, the hackers behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it’s not necessarily due to skill alone.
Tag: behind
AI, Data Breaches, Global Security News
GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise
GitHub CISO Alexis Wales has named the malicious VS Code extension behind the breach they suffered at the hands of the threat group TeamPCP: Nx Console, a popular developer tool with 2.2 million installs. A malicious version of the otherwise benign extension was used to steal secrets and developer credentials, which were then used to…
Global Security News
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.
Global Security News
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has released a proof-of-concept (PoC) for a Windows privilege escalation zero-day flaw that grants attackers SYSTEM privileges on fully patched Windows systems. Codenamed MiniPlasma, the vulnerability impacts “cldflt.sys,” which refers to the Windows Cloud Files Mini Filter Driver,
AI, Funding, Global Security News, Government & Policy
DOJ releases legal rationale for nationwide voter data collection
The Trump administration released a legal opinion outlining the legal rationale behind its nationwide voter data collection efforts, justifying an aggressive federal role in vetting voter eligibility, a position courts have repeatedly rejected in related litigation. The memo, released Tuesday by the Department of Justice Office of Legal Counsel, concedes that while election administration is…
AI, Data Breaches, Global Security News, Risk Management
Instructure took a risky approach to recover stolen Canvas data
Instructure, the company behind the online learning platform Canvas, said it reached an agreement with the extortion group ShinyHunters to prevent data stolen in a recent breach from being leaked online. According to the company’s website, Canvas has more than 30 million active users worldwide and serves more than 8,000 institutions. Although Instructure did not…
Data Breaches, Global Security News
Instructure reaches ‘agreement’ with ShinyHunters to stop data leak
Instructure, the edtech giant behind the widely popular Canvas learning management system (LMS), has reached an “agreement” with the ShinyHunters extortion group to prevent the data stolen in a recent breach from being leaked online. […]
AI, Global Security News
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign. The affected npm packages have been modified to include an obfuscated JavaScript file (“router_init.js”) that’s designed…
AI, Cybersecurity, Data Breaches, Exploits, Global Security News, Risk Management
Pressure mounts on Canvas as data leak extortion deadline looms
Pressure is mounting on Instructure, the company behind Canvas, as cybercriminals threaten to leak a trove of sensitive data they claim was stolen during a prolonged cyberattack on the widely used education tech platform. Widespread outages left schools, students and teachers temporarily unable to access critical data late last week after the company took Canvas…
AI, Cybersecurity, Data Breaches, Exploits, Global Security News, Government & Policy
Lyrie.ai Deploys Real-Time Zero-Day Tracking Across Global Enterprise Infrastructure
OTT Cybersecurity LLC, the company behind Lyrie.ai, today announced several milestones that together position the company as foundational security infrastructure for the agentic AI era: the deployment of a real-time zero-day tracking and disclosure system designed to notify affected organizations of active exploit activity; acceptance into Anthropic’s Cyber Verification Program (CVP); and the public release…
AI, Compliance, Exploits, Global Security News, Network Security, Risk Management
Your refresh plan has a CVE blind spot
The conversation is straightforward, but the problem behind it is not. The customer bought servers in 2017 and typically refresh every five to six years. Generally, around the 2022 to 2023 timeframe, they would have looked to buy new. Historically, that is what would have happened. But COVID hit, and there were supply chain constraints…
AI, Data Breaches, Global Security News
Instructure hacker claims data theft from 8,800 schools, universities
The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for students and staff from 8,809 colleges, school districts, and online education platforms. […]
Global Security News
The Roomba Guy’s Second Act: A Robot You’ll Want to Snuggle
The inventor behind the world-famous robot vacuum is now designing robots that form an emotional bond with their owners.
Cybersecurity, Global Security News
Edu tech firm Instructure discloses cyber incident, probes impact
Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybersecurity incident and is now investigating its impact. […]
Global Security News
Edtech firm Instructure confirms data breach after Salesforce instance hack
Instructure, the company behind the widely used Canvas learning platform, has disclosed a security incident after a social engineering attack allowed hackers to access data in its Salesforce instance. […]
AI, Cybersecurity, Global Security News, Risk Management
Securonix Partners with AI SPERA for Criminal IP in ThreatQ
Cybersecurity provider Securonix has announced a new partnership with AI SPERA, the company behind Criminal IP, to deliver integrated threat intelligence enrichment through the ThreatQ Platform. The integration combines ThreatQ data-driven orchestration and investigation capabilities with Criminal IP’s real-time IP threat intelligence, providing security teams with deeper context to prioritize and respond to threats faster. …
Global Security News
From Strategy to Architecture: How Cisco is Building a Quantum-Safe Future
Dive into the architecture behind Cisco’s holistic, mutilayered PQC strategy to understand how Cisco is operationalizing the secure communications and secure products across the communication planes, inside the chipset, and down to the firmware that loads before your operating system even boots.
AI, Funding, Global Security News
Google Cloud Funds Partner Push for Enterprise AI Agents
Google Cloud is putting new financial weight behind its partner ecosystem as it pushes deeper into enterprise AI, announcing a $750 million fund at Next ’26 to accelerate partner-led development and deployment of “agentic” AI systems. New fund promises to support prototyping, AI training, and more across partner ecosystem The investment, which Google says will…
AI, Apps, Endpoint, Exploits, Global Security News, Risk Management
Why API Discovery Is the First Step to Securing AI
TL;DR AI risk doesn’t live in the model. It lives in the APIs behind it. Every AI interaction triggers a chain of API calls across your environment. Many of those APIs aren’t documented or tracked. That’s your real exposure. Shadow API discovery gives you visibility into those hidden endpoints, so you can find them before…
Global Security News
KelpDAO suffers $290 million heist tied to Lazarus hackers
State-sponsored North Korean hackers are likely behind the $290 million crypto-heist that impacted the KelpDAO DeFi project on Saturday. […]
AI, Global Security News, Russia
Crypto Exchange Grinex Blames Western Spies for $13m Theft
Russian crypto-exchange Grinex claims Western intelligence agencies were behind a $13m heist
AI, Data Breaches, Global Security News
[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment
In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human identities that nobody was watching. For every employee in your org, there are 40 to 50 automated credentials: service accounts, API tokens, AI agent connections, andOAuth grants. When projects end or employees leave, most
Global Security News
Anthropic Adds Novartis CEO to Board
The startup behind the popular Claude chatbot and coding tool is eyeing a potential IPO as soon as this year.
AI, Data Breaches, Exploits, Global Security News
Rockstar Games receives “pay or leak” warning after cyberattack
Rockstar Games, the developer behind titles such as Grand Theft Auto and Red Dead Redemption, has confirmed a cyberattack claimed by hacking group ShinyHunters, which says it accessed the company’s Snowflake environment and obtained data. The attackers exploited Anodot, a third-party SaaS platform used for cloud cost monitoring and analytics, as the entry point and…
AI, Global Security News
Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.
AI, Global Security News
MCA Australia opens its major summer exhibition Data Dreams: Art and AI, part of the Sydney International Art Series 2025–26
Who holds the power behind the algorithm? Can machines dream? What does it mean to be human in an age of AI? A groundbreaking exhibition which asks how artificial intelligence is transforming the way we live, think and create.
AI, Global Security News
Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs
SANS Institute reveals that AI agents are behind a 76% surge in non-human identities
Global Security News
Homey Expands with Reolink Integration Across Cameras, Doorbells and NVRs
Athom, the company behind the Homey smart home platform, today announced an official integration with Reolink. With the new Reolink app in the Homey App Store, users can connect their Reolink cameras, doorbells, and NVR systems to Homey.
AI, Apps, Global Security News, Government & Policy, Network Security, Risk Management
Nvidia’s SchedMD acquisition puts open-source AI scheduling under scrutiny
Nvidia’s recent acquisition of SchedMD, the company behind the Slurm workload manager, is raising concerns among AI industry executives and supercomputing specialists who fear the chip giant could use its new position to favour its own hardware over competing chips, whether through code prioritization or roadmap decisions. The concern, as industry sources frame it, is…
AI, Global Security News
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on March 3, March 13, and March 23, 2026, per Check Point. “The campaign is…
AI, Data Breaches, Europe, Global Security News
Trivy supply chain attack enabled European Commission cloud breach
CERT-EU confirmed that ShinyHunters are behind the recent breach of the cloud infrastructure underpinning websites of the European Commission, and that they stole and subsequently leaked approximately 340 GB of data. “Analysis of the published dataset has so far confirmed the presence of personal data, including lists of names, last names, usernames, and email addresses,…
Global Security News
Cyber professionals urged to have their say on workforce future
Momentum is building behind efforts to strengthen Australia’s cyber workforce, with the consultancy – CyberPath: Paving the Way Forward for Cyber Professionals program with a national consultation series underway to help shape how the profession is recognised, supported and developed.
AI, Global Security News
TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files
TeamPCP, the threat actor behind the supply chain attack targeting Trivy, KICS, and litellm, has now compromised the telnyx Python package by pushing two malicious versions to steal sensitive data. The two versions, 4.87.1 and 4.87.2, published to the Python Package Index (PyPI) repository on March 27, 2026, concealed their credential harvesting capabilities within a…
AI, Global Security News
Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit
TeamPCP is the likely cyber threat actor behind attacks on Trivy, Checkmarx’s KICS and VS Code plug-ins, and the LiteLLM AI library — and all signs point to more attacks to come.
AI, Global Security News
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named litellm, pushing two malicious versions containing a credential harvester, a Kubernetes lateral movement toolkit, and a persistent backdoor. Multiple security vendors, including Endor Labs and JFrog, revealed that litellm versions 1.82.7 and 1.82.8 were published…
Global Security News, Russia
Russian Initial Access Broker Handed 81-Month Sentence
Russian cybercriminal Aleksei Volkov has received close to seven years behind bars for role in Yanluowang ransomware
Global Security News
Cloud workload security: Mind the gaps
As IT infrastructure expands, visibility and control often lag behind – until an incident forces a reckoning
AI, Global Security News, malware
North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that’s distributed via malicious Microsoft Visual Studio Code (VS Code) projects. The use of VS Code “tasks.json” to distribute malware is a relatively new tactic adopted by the threat actor since…
AI, Global Security News
Trivy supply-chain attack spreads to Docker, GitHub repos
The TeamPCP hackers behind the Trivy supply-chain attack continued to target Aqua Security, pushing malicious Docker images and hijacking the company’s GitHub organization to tamper with dozens of repositories. […]
AI, Global Security News
Global Crackdown Dismantles 4 Botnets Behind Major DDoS Attacks
Global crackdown dismantles Aisuru, KimWolf, JackSkid and Mossad botnets behind major DDoS attack campaigns targeting millions of devices worldwide.
AI, Global Security News, malware
Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages
The threat actors behind the supply chain attack targeting the popular Trivy scanner are suspected to be conducting follow-on attacks that have led to the compromise of a large number of npm packages with a previously undocumented self-propagating worm dubbed CanisterWorm. The name is a reference to the fact that the malware uses an ICP…
AI, china, Global Security News, Government & Policy, malware, Network Security
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators
DoJ disrupted IoT botnets’ C2 infrastructure with global partners, targeting operators behind AISURU, Kimwolf, JackSkid, and others. The U.S. DoJ disrupted command-and-control infrastructure used by several IoT botnets, including AISURU, Kimwolf, JackSkid, and Mossad. The operation involved authorities from Canada and Germany, along with major tech companies, to target botnet operators and weaken their global…
AI, Global Security News, Government & Policy, Network Security
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million Internet of Things (IoT) devices, such as routers and web cameras. The feds say the four botnets — named Aisuru, Kimwolf, JackSkid and Mossad — are responsible for a…
AI, Global Security News
Music giant BMG sues Anthropic over AI training
Music giant BMG has filed a lawsuit against Anthropic, the company behind the popular chatbot Claude, alleging it trained its AI models using copyrighted song lyrics from artists such as the Rolling Stones, Bruno Mars, and Ariana Grande. “Anthropic’s practice of training AI models on copyrighted works from torrent sites is in direct violation of…
Cybersecurity, Global Security News
Why Cybersecurity Is Now Mission-Critical in Formula 1’s Data-Driven Era
At first glance, Formula 1 is about speed, precision, and engineering excellence. But behind the cars and the spectacle lies a less visible battleground: cybersecurity.
AI, Apps, Exploits, Global Security News, Risk Management
News alert: GitGuardian study shows AI coding tools double leak rates as 29M credentials hit GitHub
NEW YORK, Mar.17, 2026, CyberNewswire — GitGuardian, the security leader behind GitHub’s most installed application, today released the 5th edition of its “State of Secrets Sprawl” report, documenting how mainstream AI adoption in 2025 reshaped software delivery and accelerated the exposure of non-human identities (NHIs) and their secrets across public and internal systems. While the…
AI, Global Security News, malware, Network Security
North Korean fake IT worker tradecraft exposed
Research from GitLab has exposed the latest tradecraft behind North Korean fake IT worker scams. GitLab banned 131 North Korean-attributed accounts last year, most of which involved JavaScript repositories that acted as resources in the so-called Contagious Interview campaign. In most cases, GitLab projects acted as obfuscated loaders for malware payloads — such as BeaverTail…
Global Security News, malware
The New Turing Test: How Threats Use Geometry to Prove ‘Humanness’
Malware is evolving to evade sandboxes by pretending to be a real human behind the keyboard. The Picus Red Report 2026 shows 80% of top attacker techniques now focus on evasion and persistence, including geometry-based cursor tests and CPU timing checks. […]
AI, Global Security News
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored adversary, which is also tracked under the cryptonyms Jade Sleet, PUKCHONG, Slow Pisces,…
AI, china, Cybersecurity, Exploits, Global Security News, Government & Policy, Russia
Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack
An exploit kit that may have originated from a leaked U.S. government framework is behind what researchers are calling the first mass-scale attack on iOS, the operating system for Apple’s iPhones. Traces of the exploits, found in the work of Chinese cybercriminals, also have been spotted in Russian attacks on Ukraine and used by a…
AI, Global Security News
Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries
The threat actor behind the recently disclosed artificial intelligence (AI)-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks. The new findings come from Team Cymru, which detected its use following an analysis of the IP address (“212.11.64[.]250”) that was used by the suspected
AI, Data Breaches, Global Security News
Star Citizen game dev discloses breach affecting user data
Cloud Imperium Games (CIG), the game developer behind Star Citizen and Squadron 42, says attackers breached systems containing some users’ personal information in January. […]
AI, Apps, Endpoint, Europe, Global Security News, Network Security, privacy
Windows 11 Insider Previews: What’s in the latest build?
Windows 11 25H2 has been released, but behind the scenes, Microsoft is constantly working to improve the newest version of Windows. The company frequently rolls out public preview builds to members of its Windows Insider Program, allowing them to test out — and help shape — upcoming features. Skip to the latest builds The Windows…
AI, Global Security News
Inside Apple’s Push to Build an All-American Chip
The iPhone maker wants more supply based in the U.S., which remains years behind Asia.
AI, Cybersecurity, Data Breaches, Global Security News, Government & Policy, Network Security
FBI: Threats from Salt Typhoon are ‘still very much ongoing’
A top FBI cyber official said Salt Typhoon, the Chinese cyber espionage group behind the widespread compromise of U.S. telecommunications infrastructure in 2024, continues to pose a broad threat to both America’s private and public sectors. Michael Machtinger, deputy assistant director for cyber intelligence at the FBI, touted improved partnerships between the telecommunications industry and…
AI, Global Security News, Risk Management
When AI Writes the Code, Security Must Manage the Risks
Security must scale alongside AI development rather than lagging behind. This requires rethinking AppSec and risk management as a continuous practice driven by intelligence. The post When AI Writes the Code, Security Must Manage the Risks appeared first on RTInsights.
AI, Global Security News
Selling AI Software Isn’t as Easy as It Used to Be
The golden age of unbridled spending on AI software might be behind us, as vendors say it’s a lot harder to make a sale than it used to be.
AI, Global Security News
Pedaling AI Software Isn’t As Easy as It Used to Be
The golden age of unbridled spending on AI software might be behind us, as vendors say it’s a lot harder to make a sale than it used to be.
AI, Global Security News, Russia
Poland Energy Survives Attack on Wind, Solar Infrastructure
Russia-aligned groups are probable culprits behind the wiper attacks against renewable energy farms, a manufacturer, and a heating and power plant.
AI, Global Security News
Anthropic Takes Big Step in AI Race to Reshape College Coding Courses
The company behind Claude forged an alliance to put its AI tools in the hands of students at hundreds of community and state colleges.
AI, Apps, Global Security News, News and Trends, Risk Management, Security, Tools & Platforms
SpecterOps Unveils BloodHound Scentry, Expanding Identity APM
SpecterOps, the pioneer behind identity Attack Path Management (APM), has introduced BloodHound Scentry, a new service designed to help customers accelerate their APM practice and reduce identity risk. Protecting an organization’s critical assets According to the company, BloodHound Scentry combines the capabilities of BloodHound Enterprise with the tradecraft of SpecterOps experts to provide tailored guidance…
AI, Global Security News
7 Growth Tips Every Tech Start-up Business Needs to Learn
The technology sector moves at lightning speed, and standing still means falling behind. For tech start-ups navigating this competitive landscape, sustainable growth requires more than just a brilliant idea or cutting-edge product. It demands strategic planning, adaptability, and a willingness to learn from both successes and failures.
AI, Global Security News
7 Growth Tips Every Tech Start-up Business Needs to Learn
The technology sector moves at lightning speed, and standing still means falling behind. For tech start-ups navigating this competitive landscape, sustainable growth requires more than just a brilliant idea or cutting-edge product. It demands strategic planning, adaptability, and a willingness to learn from both successes and failures.
AI, Data Breaches, Don't miss, Global Security News, Hot stuff, Network Security, News, Ransomware, SmarterTools
Ransomware group breached SmarterTools via flaw in its SmarterMail deployment
SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. How did the SmarterTools breach happen? Derek Curtis, the firm’s Chief Operating Officer, said that the breach happened on January 29, 2026. “Prior to the breach, we had approximately…
AI, Data Breaches, Don't miss, Global Security News, Hot stuff, Network Security, News, Ransomware, SmarterTools
Ransomware group breached SmarterTools via flaw in its SmarterMail deployment
SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. How did the SmarterTools breach happen? Derek Curtis, the firm’s Chief Operating Officer, said that the breach happened on January 29, 2026. “Prior to the breach, we had approximately…
AI, Apps, Cloud, Cloud Security, Cybersecurity, Data Breaches, Endpoint, Exploits, Global Security News, malware, Network Security, News, Risk Management, Threats
TeamPCP and the Rise of Cloud-Native Cybercrime
Flare researchers have identified a threat actor known as TeamPCP behind a large-scale campaign targeting cloud-native infrastructure by abusing exposed orchestration and management interfaces. First observed in late 2025, the activity reflects a broader shift away from endpoint-focused attacks toward systematic exploitation of cloud control planes. “The campaign reflects a dark mirror of legitimate markets.…