supply chain attack Archives • Daily CyberSecurity

Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants Microsoft Entra sign-in logs showing ConnectWise Cloud Backup and ConnectWise Cloud Backup breach activity

Microsoft Entra sign-in logs showing ConnectWise Cloud Backup and ConnectWise Cloud Backup breach activity

Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants

Do Son October 21, 2026

TL;DR Threat actors stole a vendor API secret belonging to ConnectWise Cloud Backup (formerly SkyKick) to access...

OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build OVHcloud CLI attack in a supply chain attack that replaced GitHub release binaries with a secret-stealing build

OVHcloud CLI attack in a supply chain attack that replaced GitHub release binaries with a secret-stealing build

OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build

Do Son October 20, 2026

TL;DR On October 19, 2026, an attacker replaced official OVHcloud CLI release files on GitHub with a...

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites

UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites

Do Son October 20, 2026

TL;DR TeamUpdraft says attackers likely accessed its customer database over the weekend of 17-18 October. The UpdraftPlus...

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days Weekly CVE report Oct 12-18 2026 exploited vulnerabilities compared with CISA KEV

Weekly CVE report Oct 12-18 2026 exploited vulnerabilities compared with CISA KEV

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days

Do Son October 19, 2026

Between October 12 and 18, 2026, CVE Watchtower logged 5,499 new vulnerabilities. This weekly CVE report tracks...

Rank Math SEO PRO supply-chain compromise diagram showing CVE-2026-111862 backdoor impact

Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123

Do Son October 17, 2026

TL;DR Rank Math SEO PRO for WordPress suffered a critical supply-chain compromise (CVE-2026-111862) that is actively exploited...

Ledger Supply Chain Attack Hits Europe via Tampered Wallets Ledger Nano X hardware wallet dismantled showing malicious LTE module modification

Ledger Nano X hardware wallet dismantled showing malicious LTE module modification

Ledger Supply Chain Attack Hits Europe via Tampered Wallets

Do Son October 13, 2026

Investigators previously discovered that a Malaysian distributor for the French cryptocurrency hardware wallet manufacturer Ledger systematically tampered...

Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents Malicious npm packages from the fake Web3 accelerator Apex delivering CloudSyncD and a Windows infostealer

Malicious npm packages from the fake Web3 accelerator Apex delivering CloudSyncD and a Windows infostealer

Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents

Do Son October 13, 2026

At a glance Malware family CloudSyncD (macOS) and a custom Windows information stealer Threat actor Unknown operators...

Trojanized Terraform provider attack chain linked to suspected TraderTraitor hackers delivering FLATROOF and ROOFDECK malware

Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK

Do Son October 12, 2026

At a glance Actor Suspected TraderTraitor (Jade Sleet, UNC4899, Pressure Chollima, Slow Pisces) Activity Trojanized developer tool...

Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign GlassWorm VS Code themes cluster of malicious VS Code extensions posing as color themes

GlassWorm VS Code themes cluster of malicious VS Code extensions posing as color themes

Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign

Do Son October 5, 2026

At a Glance Malware family GlassWorm loader; a separate Windows downloader Threat actor GlassWorm operators (high confidence...

Microsoft Details NeedyMantis Malware Used for Long-Term Access in Targeted Intrusions A graphic showing BGP routing hijacking redirecting a server update to a malicious source

A graphic showing BGP routing hijacking redirecting a server update to a malicious source

Microsoft Details NeedyMantis Malware Used for Long-Term Access in Targeted Intrusions

Do Son October 1, 2026

A fake update component for the Poedit translation app gave attackers a quiet foothold on Windows machines....

Malicious Terraform Providers Spread Graphalgo Go Malware Diagram to detect malicious Terraform providers and stop malicious Terraform providers in CI/CD

Diagram to detect malicious Terraform providers and stop malicious Terraform providers in CI/CD

Malicious Terraform Providers Spread Graphalgo Go Malware

Do Son September 25, 2026

At a Glance Attribute Details Malware Family Graphalgo (Go port) Threat Actor Unknown (suspected Graphalgo campaign operator)...

MemTensor MemOS Compromise Exposes AI Developer Secrets Diagram showing the MemTensor MemOS compromise details and how the MemTensor MemOS compromise affects developers

Diagram showing the MemTensor MemOS compromise details and how the MemTensor MemOS compromise affects developers

MemTensor MemOS Compromise Exposes AI Developer Secrets

Do Son September 23, 2026

At a Glance Attribute Details Malware Family sckit Go binary Threat Actor Unknown Target Victims AI developers...

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules

Do Son September 5, 2026

Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to...

Virtualizor Hit By BGP Hijack Attack A graphic showing BGP routing hijacking redirecting a server update to a malicious source

Virtualizor Hit By BGP Hijack Attack

Do Son September 2, 2026

The server management panel Virtualizor recently suffered a devastating supply chain attack. Hackers maliciously manipulated Border Gateway...

Virtualizor supply-chain attack via BGP hijack delivering a malicious update that plants a root backdoor on VPS hosts

Virtualizor Supply-Chain Attack: BGP Hijack Plants Backdoors

Do Son September 1, 2026

The veteran VPS server management panel Virtualizor has confirmed a serious supply-chain attack. Between 28 and 30...

TeamPCP Hackers Arrested in Joint Operation Australian Federal Police arresting TeamPCP hackers in Perth for cybercrimes

TeamPCP Hackers Arrested in Joint Operation

Do Son August 28, 2026

Australian news outlets and law enforcement agencies recently announced a significant breakthrough. On August 26, 2026, the...

ZBT Router Backdoor: VulnCheck Sinkholes SPEAKINGSTONE and DARKLANTERN Implants ZBT router backdoor implants SPEAKINGSTONE and DARKLANTERN mapped by VulnCheck in the supply chain

ZBT router backdoor implants SPEAKINGSTONE and DARKLANTERN mapped by VulnCheck in the supply chain

ZBT Router Backdoor: VulnCheck Sinkholes SPEAKINGSTONE and DARKLANTERN Implants

Do Son August 28, 2026

TL;DR VulnCheck found firmware-level implants in ZBT routers sold worldwide, including on Amazon. The ZBT router backdoor...

arrayref Rust Crate Hijacked in Supply Chain Attack With DPRK Infrastructure Overlap Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

arrayref Rust Crate Hijacked in Supply Chain Attack With DPRK Infrastructure Overlap

Do Son August 20, 2026

At a Glance Actor Unattributed; infrastructure overlaps with DPRK-linked activity (Wiz) Activity Software supply chain attack via...

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024 GEEKOM driver backdoor malware mini PC AMD infected download page

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024

Do Son August 18, 2026

Domestic mini PC manufacturer GEEKOM was recently discovered to be distributing driver downloads through its official website...

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2

ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2

Do Son August 13, 2026

At a glance Malware family ChainDrop (Shai-Hulud code lineage) Threat actor Unattributed; possible link to TeamPCP (not...

BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins BdThemes supply chain attack diagram showing a poisoned WordPress plugin API feed injecting XSS into an admin dashboard

BdThemes supply chain attack diagram showing a poisoned WordPress plugin API feed injecting XSS into an admin dashboard

BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins

Do Son August 9, 2026

At a Glance Malware family API-driven XSS supply chain implant (Biggopti banner abuse) Threat actor Suspected; linked...

QuickFox Supply Chain Attack Delivers FDMTP Implant to Windows Users C2Looper Rust backdoor diagram showing GitHub command-and-control and ClickFix ransomware infection chain

C2Looper Rust backdoor diagram showing GitHub command-and-control and ClickFix ransomware infection chain

QuickFox Supply Chain Attack Delivers FDMTP Implant to Windows Users

Do Son August 7, 2026

At a Glance Attribute Detail Malware family FDMTP implant (.NET, TouchSocket-based) Threat actor Suspected Twill Typhoon (not...