Security·
A CISA contractor left GovCloud admin keys on public GitHub. The file was named 'Important AWS Tokens.txt'.
GitGuardian found a public CISA repo with 844 MB of secrets, including AWS GovCloud admin keys. The repo sat open for six months.
#supply-chain
RSSSupply-chain attacks, typosquatting, dependency compromises, and the ecosystem response.
Security·
A bad command-line parser turned every claude-cli:// link into a remote shell
Joernchen of 0day.click found a deeplink RCE in Claude Code. Anthropic shipped the fix in 2.1.118 the same week.
Security·
Twin contractors deleted 96 federal databases in 56 minutes. One asked an AI how to clear the logs.
A federal jury convicted Sohaib Akhter on May 7 of wiping 96 government databases at Opexus. His twin Muneeb queried an AI: 'how do I clear system logs from SQL servers.'
Security·
TanStack published its npm supply-chain postmortem. The attack chained three GitHub Actions flaws.
Attackers compromised 42 TanStack packages through a pull_request_target exploit, cache poisoning, and OIDC token theft. An external researcher caught it in 20 minutes.
AI·
Chinese proxy networks sell Claude API access at 90% off. They harvest every prompt that passes through.
A ChinaTalk investigation reveals how 'transfer stations' resell Anthropic API access using stolen credentials, model substitution, and prompt harvesting.
Security·
380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.
RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.
Security·
ShinyHunters hit Canvas LMS for the second time. 275 million student records, 9,000 schools.
ShinyHunters breached Canvas LMS again, claiming 275 million records from 9,000 schools. Names, emails, student IDs, and private messages exposed.
Security·
DAEMON Tools shipped a signed backdoor for almost a month. Kaspersky says one school in Russia got the second stage.
Kaspersky pinned a supply-chain attack on the DAEMON Tools installer dating to April 8. Thousands hit globally, dozens upgraded to a QUIC RAT implant via signed binaries.
Policy·
FCC just voted to bar Chinese labs from certifying US electronics. 75% of devices are tested there now.
Brendan Carr's FCC advanced the 'Bad Labs' rule on April 30 in a 3-0 vote, kicking off a 60-90 day comment period. The rule covers 126 labs in China and Hong Kong.
Security·
A DDoS knocked Ubuntu's update servers offline. The Copy Fail patch landed in the same 24-hour window.
The 313 Team flooded Canonical's infrastructure starting May 1, blocking apt updates and the Ubuntu security API just as admins needed both.
Security·
Mini Shai-Hulud hit PyTorch Lightning. The 11.6M-download PyPI package shipped a credential stealer.
Two malicious lightning releases hit PyPI on April 30. The 42-minute window was enough to ship an RSA-encrypted infostealer to ML developers worldwide.
Security·
70 million domains had a no-password root bypass. cPanel rushed an emergency patch.
cPanel shipped fixes April 28 for a CVSS 9.8 auth bypass that walks attackers into shared-hosting panels with no password. WatchTowr says exploitation started before the patch.
Security·
'Copy Fail' lets a 732-byte script grab root on Ubuntu, RHEL, and SUSE. Patched April 29.
CVE-2026-31431 chains AF_ALG and splice() to write into the page cache of /usr/bin/su. Xint Code disclosed it on April 29, nine years after the bug shipped.
Security·
Wiz found an RCE in GitHub's git-push pipeline. The patch shipped in six hours.
CVE-2026-3854 is a CVSS 8.7 RCE in GitHub's git-push pipeline. github.com fixed it within hours. 88% of Enterprise Server installs were still vulnerable at disclosure.
Security·
Another npm worm: CanisterWorm hits 16 Namastex packages and reaches PyPI on the same hop
Socket flagged a self-propagating worm in @automagik/genie, pgserve, and 14 sibling Namastex Labs packages. It steals 40 credential categories and republishes itself.
Security·
A malicious GGUF file owns your SGLang server: CVE-2026-5760 is an unpatched 9.8
SGLang's reranker renders chat templates without a sandbox. Load a hostile GGUF, hit /v1/rerank, and the attacker has Python on your inference box. No patch yet.
AI·
A Discord group guessed Anthropic's URL pattern and walked into Claude Mythos
Bloomberg reports a small group accessed Anthropic's locked-down Mythos model the same day it launched, using credentials from a third-party contractor and educated URL guessing.
Security·
Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies
Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.