8 Narratives · RSS · shorter items in the Daily Brief
A supply chain compromise placed a backdoored version of Anthropic's Claude Code extension in Cursor's marketplace for roughly 11-12 hours, reaching up to 5,000 users before removal. The malicious versions added SSH keys, installed persistence mechanisms,
Built from 8 signals across 8 sources · 407 items reviewed
A PKI compromise at eMudhra exposed private keys for eight intermediate certificate authorities, enabling anyone to forge valid TLS certificates for arbitrary domains. Major platform vendors and runtime maintainers responded with coordinated certificate blocklists, but the fragmented trust store landscape
Built from 6 signals across 6 sources · 408 items reviewed
What changed · following since Oct 25 Oct 30 — Palo Alto Networks confirmed active exploitation against internet-exposed PAN-OS management interfaces and is releasing fixed versions across affected branches.
The attack surface has widened from PHP itself to critical network
Built from 20 signals across 13 sources · 1745 items reviewed
Two attacks show that AI systems can fail at both ends of the software supply chain: altered model weights can hide credential-stealing behavior, while autonomous agents can scale intrusion across many sites with limited human involvement. ProjectDiscovery demonstrated a
Built from 2 signals across 2 sources · 173 items reviewed
Anthropic’s OSS Scanner shows that finding open-source defects is advancing faster than getting them remediated. On October 9, Anthropic launched the opt-in service after using Claude during Project Glasswing, while a reported 29,000 possible bugs led
Built from 2 signals across 2 sources · 100 items reviewed
What changed · following since Oct 10 Oct 20 — GhostAction has added GitHub-themed phishing and a VS Code-triggered credential stealer disguised as a font file, with 94 repositories carrying the second stage.
GhostAction has evolved from workflow injection into
Built from 5 signals across 3 sources · 515 items reviewed
What changed · following since Oct 8 Oct 18 — MALFEX package imgdecode, uploaded September 30, 2026, had 979 downloads and used a Windows DLL to decrypt GitHub shellcode and inject it into dllhost.exe.
Two npm supply-chain paths now cover
Built from 5 signals across 3 sources · 293 items reviewed
What changed · following since Oct 6 Oct 7 — OX Security found no marketplace vetting across 15,465 public MCP servers, including expired domains and hosts routed through consumer tunnels.
MCP is exposing a structural trust boundary between connected agents: a
Built from 3 signals across 3 sources · 185 items reviewed