lead · supply-chain
Supply-chain attack on VaultBridge SDK exposes 1.2M enterprise tokens
A poisoned npm release of @vaultbridge/sdk silently exfiltrated CI/CD secrets for nine days before maintainers noticed. We pieced together the timeline.
threats
AI-generated phishing kits trade for $19 on darknet markets
We bought five. Three actually work. Here is what is in the box, and which mail providers still wave them through.
apt
ScarletByte APT pivots to firmware persistence in network gear
Boot-level implants found on three vendors switches share a loader that survives factory reset.
vulnerabilities
Sentinel-9 ships emergency patch for kernel driver flaw
A signed driver could be coerced into arbitrary memory writes from user-mode. Patch out, IOC list below.
law-enforcement
47 servers seized in international SIM-swap ring takedown
A two-year operation across nine jurisdictions ends with 31 arrests and a leaked playbook detailing carrier-insider recruitment.
ai-security
Model-poisoning toolkit found pre-installed on Ferrum AI marketplace clones
Forks of the open-source Ferrum AI model marketplace are being seeded with backdoors that activate only at inference time.
mobile
NimbusBank mobile app shipped with hard-coded staging key for 11 months
A debug fallback path remained reachable in production builds. The bank says no funds were moved; researchers say that is not the question to ask.