All Related Articles for: CISA Warns of Active Langflow RCE, Trivy Supply Chain Attacks
-
Hacked GitHub via tainted VS Code extension
GitHub confirmed a security breach after TeamPCP infiltrated its…
Read More » -
Hackers Poison Open Source Code at Unprecedented Scale
A cybercriminal group called TeamPCP has transformed software supply…
Read More » -
GitHub confirms hackers breached thousands of internal repos
GitHub confirmed a breach that compromised approximately 3,800 internal…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
Trellix Confirms Source Code Breach
Trellix, a major US cybersecurity firm formed from the…
Read More » -
CISA Adds Actively Exploited Linux Root Bug to KEV List
CISA added Linux kernel vulnerability CVE-2026-31431 ("Copy Fail") to…
Read More » -
Hackers Exploit Critical LiteLLM Pre-Auth SQLi Flaw
Hackers are actively exploiting a critical pre-authentication SQL injection…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
Open-Source Tool Reveals CI/CD Pipeline Attack Methods
Boost Security has launched SmokedMeat, an open-source framework that…
Read More » -
Marimo RCE flaw exploited in active attacks
A critical vulnerability (CVE-2026-39987) in the Marimo Python notebook…
Read More » -
Axios npm Hack, FortiClient EMS Bugs Exploited
The financial sector warns that generative AI has made…
Read More » -
Hackers Breach EU Commission Via Security Tool Trivy
A major data breach at the European Commission was…
Read More » -
Chrome Zero-Day CVE-2026-5281 Exploited, Patch Available
Google has released a critical Chrome update patching 21…
Read More » -
Malware hidden in backdoored Telnyx PyPI package
A malicious version of the Telnyx SDK Python package…
Read More » -
CISA Warns Hackers Exploit Langflow AI Flaw
A critical vulnerability (CVE-2026-33017) in the Langflow AI framework…
Read More » -
LiteLLM PyPI packages hijacked in TeamPCP supply chain attacks
A coordinated software supply chain attack by the group…
Read More » -
Trivy Supply Chain Attack Spreads via Compromised Docker Images
The Trivy supply chain attack has escalated with newly…
Read More » -
Iran-Targeting Malware Infects Open Source Software
A new hacking group, TeamPCP, is conducting a sophisticated…
Read More » -
Trivy Scanner Compromised in Major Supply-Chain Attack
A supply-chain attack compromised nearly all versions of the…
Read More » -
Urgent CISA Alert: Active Microsoft SharePoint Exploit
A critical, actively exploited security flaw (CVE-2026-20963) in Microsoft…
Read More »
