News
📌Security Roundup Series: Weekend of October 5, 2026 • 4 min read deep dive🏛️Incident Overview: Target / Organization: Daiwa Securities Group Inc. / Scala Communications Inc. Threat Actor / Attribution: External Threat Actors / Third-Party Vendor Compromise Impact / Records Compromised: 110,000 Wealth Management & Brokerage Client Accounts Initial Attack Vector: Server Infiltration at
en
Technical breakdown of CVE-2026-85706 in GitLab: CVSS 10.0 unauthenticated path traversal, source code exfiltration, and CISA KEV emergency guidance.
en
Strategic security playbook for isolating self-managed GitLab instances, rotating pipeline secrets, and defending e-commerce platforms from active attacks.
en
Executive weekend threat intelligence briefing: GitLab CVSS 10.0 file read in CISA KEV (CVE-2026-85706), Adobe Commerce RCE (CVE-2026-75650), and Fortinet exploits.
en
Technical breakdown of CVE-2026-82329 in JFrog Artifactory: repository authorization bypass, dependency poisoning, and supply chain remediation.
en
A forensic investigation has unmasked the operator behind TeamPCP and the Shai-Hulud supply chain worms as Ruben Thomson of Perth, Australia. Here is the full breakdown of the OPSEC blunders, C2 infrastructure, and transitive build-pipeline attacks.
en
Deep dive into CVE-2026-72529 and CVE-2026-72530 in TrueConf Server, exploited by Head Mare for SYSTEM takeover and supply chain poisoning.
en
Comprehensive post-mortem of the Klue OAuth compromise and a step-by-step Salesforce integration audit guide.
en
Weekly briefing: 630GB Apple/Tesla trade secrets leaked, Klue OAuth Salesforce data theft, Cisco UCM webshells, and Atomic Arch.
en
Investigation into Atomic Arch: over 1,500 Arch Linux AUR packages poisoned with eBPF stealth rootkits and credential grabbers.
en
How threat group Icarus weaponized Klue OAuth app tokens to silently extract Salesforce data across hundreds of security vendors.
en
How typosquatted npm packages targeting the Mastra AI agent framework infected 144 downstream enterprise packages with a cross-platform RAT.