Supply-Chain
N-able N-central Under Siege: 4EverAble2Shell and Agent2Shell Bypass Hotfix 2 Days After the Able2Shell Zero-Day Dump
A researcher's Able2Shell dump of 33 alleged N-central zero-days forced N-able to take its hosted RMM cloud offline; new 4EverAble2Shell (root RCE) and Agent2Shell (SYSTEM on managed Windows endpoints) chains reportedly defeat the November 10 Hotfix 2.
wfx-loot: 4,800 Hijacked GitHub Accounts Push a CI Secret Stealer That Deletes Its Own Workflow Runs
A campaign that started November 10 used thousands of compromised GitHub accounts to inject a GitHub Actions secret stealer into tens of thousands of repos. It reverts its commit and deletes the run log within about a minute, so the main trace left is a gap in run numbers.
Checked Is Not Used: Four Bugs in Two Weeks Where the Verified Thing Wasn't the Thing That Ran
APT, LXD, WordPress and SonicWall all shipped fixes this month for the same design error: a security check performed on one object or path, and an action taken on another. Here is how to find that gap in your own estate.
No Exploit Required: October 2026 Was Four Stolen-Credential Breaches in a Trench Coat
LiteLLM, Gheist, UpdraftCentral, and Railway had no common CVE, but one common root cause: long-lived, over-scoped credentials sitting where attackers could reach them. A trend analysis, and the controls that would have changed each outcome.
MALFEX: Eight Malicious npm Packages Deliver Overlord RAT and a Node.js Stealer to Windows Developers
Checkmarx and CloudSEK detail MALFEX, a long-running npm campaign of eight malicious packages with 40,767 downloads that deliver the Overlord RAT, the movinlike stealer and a hidden downloader.
LiteLLM 1.107.0 Backdoored on PyPI and Docker: Python Startup-Hook Stealer Hits AI Gateway Deployments
A malicious LiteLLM 1.107.0 release on PyPI and Docker registries installed a startup-hook credential stealer and an hourly remote code loader. Anything that ran it should be treated as compromised.
Your CI Runner Holds the Keys: A Field Guide to Hardening GitHub Actions After GhostAction, Megalodon, and TanStack
Three different attacks in 2026 reached the same place: a GitHub Actions runner with secrets and an OIDC token in scope. Here's the attacker's checklist and a concrete, ordered hardening plan, with config snippets and detections, for infra teams that own CI.
GhostAction Returns: Stolen PATs Used to Push Malicious GitHub Workflows Across 30,000 Repositories
GitGuardian reports a resurgent GhostAction campaign: about 1,900 hijacked GitHub accounts pushed fake security workflows to harvest CI/CD secrets, with a spike on October 8-9 targeting over 30,000 repositories.
CVE-2026-97229: Maximum-Severity Integer Overflow in GitLab's CI/CD Regex Compiler Allows Code Execution
GitLab patched a CVSS 10.0 integer overflow in the CI/CD regular expression compiler that lets a crafted pipeline expression execute code on self-managed servers.
SubQuery's @subql/common Hijacked on npm: Credential Stealer and Reverse Shell in 5.8.3
A malicious @subql/[email protected] on npm steals cloud, SSH, GitHub and Kubernetes credentials, opens a reverse shell, and persists by injecting a rogue GitHub Actions workflow with stolen tokens.
MemTensor MemOS Packages Backdoored with sckit, a Go Credential-Stealing Worm, on npm and PyPI
Malicious releases of MemTensor's MemOS OpenClaw plugin (npm) and MemoryOS (PyPI) deliver sckit, a cross-platform Go implant that steals 13 credential types and carries worm templates for npm, PyPI and GitHub Actions.
The Skeleton Key Problem: Why 2026's Worst RCEs All Trace Back to a String Literal
SolarWinds ARM, ManageEngine, ASUS Control Center, Cisco FMC, Dell SCG, and a Tenda router backdoor all failed the same way this year: a secret baked into shipped code instead of generated per install. CWE-798 isn't a legacy bug class — it's still how management planes get owned.
Two Malicious CPAN Modules Smuggle a Python Backdoor Inside a Fake Certificate File
Crypt::SelfCertificate and IO::Socket::SSL::SelfCertificate, two CPAN distributions for generating self-signed certs, shipped versions that hide obfuscated Python code inside a sample cert.pem and execute it as a remote-fetch loader.
Verification Theater: The One-Week Pattern Behind BragJack, Plugin4Shell, and WSO2's JWT Bypass
Three unrelated disclosures landed between September 13 and 19, 2026 — a browser AI agent hijack, a Git SHA-pinning bypass in every major coding agent, and a JWT auth bypass under active exploitation. All three share one root cause: a check that confirms a label matches instead of verifying the object it names.
Plugin4Shell: SHA-Pinning Bypass Enables Zero-Click RCE Across Claude Code, Codex, Copilot, and Gemini CLI
A Git reference-resolution flaw dubbed Plugin4Shell lets a plugin repository owner silently swap the code behind a SHA-pinned install across all four major AI coding agents, achieving zero-click RCE on developer and CI machines that trust the pin.
CVE-2026-89094: A Malicious Template Repository Gets You RCE on Forgejo — and Gitea
A crafted .forgejo/template file lets any low-privileged authenticated user turn 'create repository from template' into remote code execution as the Git-forge service account. Forgejo (CVE-2026-89094, CVSS 9.9) and upstream Gitea both shipped emergency patches.
StyleSmuggler: Unpatched Magento/Adobe Commerce Zero-Day Gives Unauthenticated RCE, No Fix Yet
Sansec disclosed StyleSmuggler, an unauthenticated remote code execution chain hitting all current Magento and Adobe Commerce builds, under active attack since September 4 with no CVE and no patch.
CVE-2026-82329: Critical JFrog Artifactory Auth Bypass Under Active Exploitation for Admin Tokens
Attackers are exploiting CVE-2026-82329, a CVSS 9.8 authentication bypass in JFrog Artifactory, to mint themselves administrator tokens and enumerate credentials on internet-facing build-artifact repositories.
Mini Shai-Hulud "Trinitite": TanStack Codegen Tool Poisoned via Hijacked GitHub OIDC Release Workflow
A new Mini Shai-Hulud wave dubbed Trinitite compromised @7nohe/openapi-react-query-codegen, a 150K-download-a-week TanStack code generator, by hijacking its GitHub Actions OIDC publish workflow rather than stealing a token.
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Fourteen npm packages disguised as calendar and streak utilities smuggle in RedC2 4.0, a commercial Linux implant whose LLM-driven operator console turns plain-English prompts into post-exploitation commands.