Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
30 / 220 results
highbug_reportVulnerabilityMalicious Terraform providers on HashiCorp Registry deliver DPRK malware
HashiCorp Terraform Registry and Go module repositories. Specific malicious packages: gocommunity-io/dockerd (222 downloads), kreuzwenker/docker (1,449 downloads), gocommunity.io/orderedbtree, gogets.dev/btreex. Related npm packages also identified.
highbug_reportVulnerabilityGitLab issue email token enables code commits and CI/CD execution as user
GitLab.com (all accounts) and self-managed GitLab instances with incoming email enabled (default). GitLab Dedicated appears unaffected. All user roles affected, with impact severity scaling to account permissions (Guest minimal, Maintainer critical).
criticalbug_reportVulnerabilityGitHub Enterprise Server SSRF flaw enables remote code execution
GitHub Enterprise Server (specific versions not disclosed in available data). SSRF vulnerability CVE-2026-77987 affects on-premises GitHub Enterprise Server deployments.
criticalbug_reportVulnerabilityCritical SSRF in GitHub Enterprise Server enables remote code execution
GitHub Enterprise Server (specific versions not disclosed in available data). The vulnerability is an SSRF (Server-Side Request Forgery) flaw tracked as CVE-2026-77987.
highbug_reportVulnerabilityMemTensor npm and PyPI packages compromised to deliver sckit credential stealer
MemTensor packages: npm package @memtensor/memos-cloud-openclaw-plugin versions 0.1.21, 0.1.23, 0.1.25; PyPI package MemoryOS version 2.0.34 (now quarantined). Malicious Go-based credential stealer targets Windows, Linux, and macOS systems.
highbug_reportVulnerabilityMalicious npm package impersonates Twilio security tool to steal credentials
npm package "tw-pkgprobe-7731" (versions 1.0.0 through 1.1.1, published mid-August 2026). Targets developers using Twilio APIs in Node.js environments. Specifically exfiltrates ACCOUNT_SID and AUTH_TOKEN environment variables from Twilio integrations…
criticalbug_reportVulnerabilityBifrost AI Gateway RCE allows unauthenticated command execution via HTTP
Bifrost open-source AI gateway, all versions before transports/v2.1.0. Affects deployments with management authentication disabled (default configuration).
criticalbug_reportVulnerabilityOrkes Conductor RCE vulnerability requires immediate patching
Orkes Conductor (specific versions not disclosed in advisory). Remote Code Execution vulnerability affecting systems running the workflow orchestration platform.
criticalbug_reportVulnerabilityFake LastPass installer uses Microsoft-signed driver to kill EDR and steal passwords
Windows systems where users downloaded a fake LastPass Authenticator installer from a malicious GitHub repository (github.com/LastPass-Authenticator). The attack uses a Microsoft-signed kernel driver (Alinubx.sys, renamed CcProtect.sys from CnCrypt d…
criticalbug_reportVulnerabilityAuthentication bypass in pgAdmin 4 requires immediate patching
pgAdmin 4, a PostgreSQL database management platform. Specific affected versions not disclosed in available information. All pgAdmin 4 installations should be considered at risk until patched.
highbug_reportVulnerabilitynpm malware campaign evades install-time defenses via runtime triggers
npm package 'indexed-btree' (2M weekly downloads) and 9 related packages: ordered-kv-index, btree-leaderboard, priority-slot-queue, btree-range-store, btree-core, btree-time-index, btree-lru-cache, neighbor-key-map, sliding-score-window.
highbug_reportVulnerabilityBragJack PoC hijacks AI assistants via malicious browser extensions
AI assistants in Google Chrome, Microsoft Edge, Opera Neon, Perplexity Comet, and Anthropic Claude (Chrome). Attack vector: malicious browser extensions using Prompt Forcing technique. Specific affected versions not disclosed.
criticalbug_reportVulnerabilityOrkes Conductor pre-auth RCE (CVE-2026-58138) exploited in wild
Orkes Conductor workflow platform versions 3.21.21 through 3.30.1. All deployments with externally accessible workflow API endpoints and unsandboxed GraalVM evaluators configured with unrestricted host access are vulnerable.
highbug_reportVulnerabilityCrowdSec: 170 private repos copied via TanStack npm attack on ex-employee laptop
CrowdSec private GitHub repositories (approx. 170 repos), including web console, data science models, automation scripts, and consensus algorithm code. Affected via former employee's compromised laptop during TanStack npm supply chain attack (CVE-202…
criticalbug_reportVulnerabilityWSO2 API Management JWT auth bypass under active exploitation
WSO2 API Management products with JWT authentication enabled. Specific affected versions not disclosed in available data. Vulnerability allows authentication bypass via JWT token manipulation.
highbug_reportVulnerabilityAbandoned CDN domain re-registered; thousands of sites still load from it
Thousands of websites, code repositories, and documentation pages with hard-coded references to an expired CDN domain, re-registered in July 2025. The new owner controls wildcard DNS for the entire domain and all traffic to hostnames beneath it.
highbug_reportVulnerabilityPlugin4Shell lets repo owners swap locked AI agent plugins for malicious code
Four AI coding agents: Anthropic Claude Code (fixed in 2.1.179), OpenAI Codex (fixed in 0.146.0), GitHub Copilot (unpatched), Google Gemini CLI (will not be patched, being retired).
highbug_reportVulnerability13 malicious npm packages deliver WeaselBiscuit stealer targeting Chrome data
13 npm packages (@biz44/id10-client, @biz44/id12-client, @biz44/id44-client, @biz44/id79-client, @biz44/id95-client, @biz44/id99-client, @biz44/process-runtime-utils, @biz44/runtime-utils, engin1, id79-client, process-lhpm, process-mite, process-tail…
highbug_reportVulnerabilityLLM-generated PhantomRaven stealer distributed via 100+ npm packages
npm package registry users and developers; over 100 malicious packages uploaded between November 2022 and October 2025. Threat actor also attempted PyPI repository compromise.
criticalbug_reportVulnerabilityDocker Sandboxes VM escape on macOS allows host file access via symlinks
Docker Sandboxes versions 0.28.0 through 0.41.9 on macOS. CVE-2026-77179 (Critical, CVSS 9.4) affects virtio-fs in versions 0.28.0–0.41.9. CVE-2026-79994 (High, CVSS 8.7) affects Unix socket relay in versions 0.37.0–0.41.9.
highbug_reportVulnerabilityBrowser extensions can hijack AI agents in Chrome, Edge, Comet, Opera, Claude
Chromium-based browsers with embedded AI assistants: Google Chrome (fixed in v143.0.7499.192, Jan 2026), Microsoft Edge (fixed in v150.0.4078.48, July 2026), Perplexity Comet, Opera Neon, and Claude in Chrome extension.
highbug_reportVulnerabilityAI coding assistant hijacked to spread Shai-Hulud worm across 100 repos
Unnamed SaaS provider; approximately 100 internal code repositories compromised. Attack vector: AI coding assistant session hijack leading to poisoned PyPI package installation, GitHub OAuth token theft, and Shai-Hulud worm deployment.
highbug_reportVulnerabilityMass-scanning campaign exploits Vite CVE-2026-39364 for cloud credentials
Vite development servers exposed to the internet via --host flag or server.host configuration. Affects deployments where sensitive files exist in server.fs.allow directories and are matched by server.fs.deny patterns.
highbug_reportVulnerabilityMass-scanning campaign exploits Vite dev servers to steal AWS/Azure creds
Vite versions 7.1.0 through 7.3.2 and 8.x before 8.0.5. Internet-exposed Vite development servers (typically port 5173) running with --host flag, server.host configuration, or misconfigured Docker port mappings.
highbug_reportVulnerabilityCISA adds 5 exploited flaws in Artifactory, ScreenConnect, RouterOS to KEV
JFrog Artifactory (CVE-2026-42016, CVE-2026-42018), ConnectWise ScreenConnect client (CVE-2026-84869), and MikroTik RouterOS (CVE-2026-67277, CVE-2026-86060). All vulnerabilities are actively exploited in the wild.
criticalbug_reportVulnerabilityOpenAI agent swarm exploited RubyGems/RubyDoc for RCE and data exfiltration
RubyGems package registry and RubyDoc.info documentation service. Over 2,000 malicious packages published May-June 2026. Exploitation of .yardopts file processing in RubyDoc build system enabled remote code execution.
criticalbug_reportVulnerabilityGitLab CVSS 10.0 path traversal allows unauthenticated file read
GitLab Community Edition (CE) and Enterprise Edition (EE): all versions 18.7 to 19.1.7, 19.2.0 to 19.2.5, and 19.3.0 to 19.3.1. Requires at least one public project to exist on the instance.
criticalbug_reportVulnerabilityJFrog Artifactory flaws exploited to deploy Rust backdoor on servers
JFrog Artifactory self-hosted servers with unpatched critical and high-severity vulnerabilities. Specific CVE IDs and affected versions not disclosed in available information.
highperson_alertThreat ActorThreat Actors Abuse Claude AI Platform to Distribute ClickFix Malware
Unattributed threat actors conducting opportunistic campaigns that exploit the trust and visibility of AI platforms for malware distribution. Motivation appears to be financially driven, leveraging the growing adoption of AI tools and the inherent tr…
criticalbug_reportVulnerabilityCritical RCE flaws in Ivanti Neurons for ITSM require immediate patching
Ivanti Neurons for ITSM (specific versions not disclosed in available data). Two vulnerabilities: missing authorization and insecure deserialization enabling remote code execution.