macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts
Gaslight is a Rust-based backdoor that researchers from SentinelOne have attributed to DPRK-aligned threat actors.
All topics
Gaslight is a Rust-based backdoor that researchers from SentinelOne have attributed to DPRK-aligned threat actors.
The campaign is not the result of a compromise of Fortinet itself, but rather involves the attackers testing a custom list of known passwords for Fortinet devices.
The unknown threat actor gained unauthorized access to legitimate npm accounts, allowing them to inject malicious dependencies into widely used packages.
“Because this activity predates Oracle's June 10, 2026 advisory, the vulnerability was exploited as a zero-day," said Mandiant researchers.
Anthropic researchers warned that modern AI tools are further intensifying the existing issue of threat actors creating N-day exploits.
We've arrived at a point where billions of us have opted in to types of surveillance that would have caused massive demonstrations just a couple of decades ago.
June 17, 2026 | 1 min read