New Shai Hulud Variant Hits Red Hat npm Packages
Researchers said that they found a Red Hat employee's GitHub account had been compromised and was used by threat actors to push malicious orphan commits directly to several repositories.
Author Bio
Lindsey O'Donnell-Welch
Lindsey O’Donnell-Welch is an award-winning journalist who strives to shed light on how security issues impact not only businesses and defenders on the front line, but also the daily lives of consumers.
Featured Articles
FBI: Silent Ransom Group Turns to IT Support Ploy
The Silent Ransom Group, a data exfiltration and extortion actor, started posing as IT teams via phone calls and phishing emails sent to legal sector firms.
Authorities Disrupt First VPN Cybercriminal Service
Law enforcement is increasingly targeting the “infrastructure layer” of cybercrime, rather than ransomware operators themselves.
Grafana Investigating Token Compromise and Extortion Attempt
An "unauthorized party” obtained a token with access to the Grafana Labs GitHub environment and downloaded Grafana’s codebase.
Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973
The vulnerability (CVE-2026-6973) exists in Ivanti Endpoint Manager Mobile (EPMM) is being exploited by threat actors.
Karakurt Ransomware Negotiator Sentenced to 8 Years Prison
Deniss Zolotarjovs, 35, of Moscow, Russia, was a member of a ransomware group called Karakurt, which was led by the former operators of Conti.