On the night of Oct. 11, an unidentified attacker compromised refrigeration control systems used by hundreds of French supermarkets, forcing freezers and refrigerators into extended defrost cycles. The incident reportedly caused millions of euros in losses across about 700 stores, spoiling food, damaging equipment and sparking some fires. The affected gear included Danfoss controllers with Internet-facing web servers, many still using default admin credentials, alongside Dixell and Copeland XWEB systems.
darkreading.com
· 2026-11-06
Attackers tried to exploit CVE-2026-97229, a maximum-severity remote code execution flaw in GitLab's CI/CD regex compiler, against Alpine Linux's development infrastructure on October 20-21, repeatedly crashing GitLab processes. Alpine found no direct evidence code was executed or packages tampered with, but due to missing logs it could not rule out compromise, so it rebuilt its GitLab instance and reset all passwords.
bleepingcomputer.com
· 2026-11-01
Anthropic's official Claude VS Code extension on Cursor's marketplace was replaced with a backdoored version, 2.1.313, that could have reached up to 5,000 users before being superseded by version 2.1.314 hours later. Researchers say the malicious version installed a persistent SSH backdoor across Windows, macOS and Linux systems, and neither Cursor nor Anthropic has explained how the attacker accessed Anthropic's official distribution account.
arstechnica.com
· 2026-10-30
Cursor, the SpaceX-owned AI coding platform, found a backdoored version of Anthropic's Claude Code extension in its marketplace for about 11 hours on Thursday, downloaded by up to 5,000 users across Windows, macOS and Linux. Cursor temporarily closed the marketplace, said no other extensions were affected, and published remediation steps. Anthropic confirmed its own systems and official distribution channels were not compromised, saying an attacker used access to Cursor's marketplace to publish a tampered copy.
wired.com
· 2026-10-30
Security researchers identified a trojanized version of a Claude Code extension distributed for the Cursor IDE, putting developers who installed it at risk. The discovery coincided with a second, separate security issue affecting Cursor on the same day.
darkreading.com
· 2026-10-30
Security firm Phorion identified that version 2.1.313 of the official Claude Code extension for VS Code, distributed via the Cursor Marketplace, contained a hidden SSH backdoor targeting macOS, Linux, and Windows systems. Cursor has since removed the affected release from its marketplace and pulled the corresponding NPM and VS Code packages from their registries.
phorion.io
· 2026-10-30
A hacking campaign known as GhostAction, which targeted software supply chains through GitHub, has slowed down but has not disappeared, according to security researchers. The attackers appear to be shifting focus toward compromising developer endpoints and cloud access credentials rather than continuing their original method of attack.
darkreading.com
· 2026-10-28
At ISC2 Security Congress 2026 in Denver, Atlassian product security manager Deepam Kanjani described a real incident, with details altered to protect confidentiality, in which a malicious package carrying the Shai-Hulud worm evaded detection despite a matching SHA hash and a credible-looking GitHub repository. The malicious code sat three layers deep as a transitive dependency, so it never appeared in a top-level audit, and the organization's SBOM showed the environment as clean even as a behavioral scanner's warning was initially dismissed as a false positive.
darkreading.com
· 2026-10-27
Wiz Research has tracked an ongoing campaign called Gheist, active since September 15, 2026, that uses compromised GitHub tokens to plant a malicious 'sync-check' workflow across repositories. The workflow base32-encodes repository secrets to bypass GitHub's log masking, prints them to a workflow log, then an automated process downloads and deletes the log within seconds. Wiz has found over 13,500 planted branches across more than 850 compromised accounts, including private and enterprise repositories, and reported the activity to GitHub.
wiz.io
· 2026-10-25
Microsoft's Security blog reports that Storm-0940, a China-state-aligned hacking group, used an open-source AI agentic penetration-testing tool called ARTEX to exploit stolen ConnectWise application credentials, attempting sign-ins across more than 2,250 Microsoft 365 tenants. The group also ran automated password-spraying attacks against 327 accounts at eight organizations, generating over 151,000 failed login attempts without success. Microsoft says the breach did not stem from any vulnerability in its own systems and that it remains unclear how the ConnectWise credentials were obtained or how many tenants were actually compromised.
tomshardware.com
· 2026-10-23
Microsoft said the threat actor it tracks as Storm-0940 used compromised application credentials tied to ConnectWise Cloud Backup to try to access more than 2,250 downstream Microsoft 365 customer tenants. In some cases attackers reached privileged cloud access within three hours of targeting, and Microsoft said the group used an agentic AI penetration-testing framework to speed up the campaign. ConnectWise disclosed unauthorized access to its Cloud Backup application identities on Oct. 16 but has not said how attackers first obtained control of them.
darkreading.com
· 2026-10-22
The LiteLLM project's release pipeline was compromised on October 21, allowing attackers to publish a malicious version 1.107.0 to PyPI and Docker Hub containing compiled malware that steals credentials, secrets and environment variables. Affected artifacts included all seven PyPI wheels and several Docker Hub and GHCR image tags, live for roughly two to three hours before removal. The maintainer confirmed enterprise customers running the private version were not impacted, and said attackers modified only the installation package rather than the application code.
bleepingcomputer.com
· 2026-10-22
GoKawiil