This Week in Threat Intelligence: When Trust Becomes the Attack Surface
This week's roundup covers five stories with a common thread:
Linux
Trending Topics
RansomHouse Claims Trellix Source Code Breach, Raising New Supply Chain Concerns
Trellix
Trending Topics
PAN-OS zero-day CVE-2026-0300 exposes firewalls to root takeover. MuddyWater abuses Microsoft Teams for espionage. Instructure Canvas breach exposes student data. Calendar invite phishing rises. OceanLotus (APT32) delivers ZiChatBot via PyPI.
Trending Topics
TRENDING TOPICS
MAY 01, 2026
Copy Fail Vulnerability Turns Any Local Linux
Trending Topics
NGINX MP4 module flaw (CVE-2026-32647) enables remote code execution. Pay2Key ransomware expands to Linux, hitting VMware ESXi and cloud infra. Nasir Security inflates claimed Gulf energy breaches; real intrusions hit third-party vendors.
Trending Topics
npm package ambar-src infects 50,000+ hosts across Windows, Linux, macOS. Fake Next.js repos backdoor developer workflows. NCryptYo, DOMOAuth2, IRAOAuth2.0, and SimpleWriter hijack ASP.NET authorization. SafePay ransomware breach at Conduent exposes 25M+ records.
Trending Topics
Critical Severity
5 CVEs
CVE-2026-21522
Microsoft ACI Confidential Containers Elevation
Trending Topics
TRENDING TOPICS
FEB 05, 2026
Update: LockBit 5.0 Emerges as Cross-
Trending Topics
ShinyHunters and Scattered Spider intrusions show identity is now the top SaaS attack vector. State-backed actors compromised Notepad++'s update servers. ShadowHS delivers fileless Linux post-exploitation. Arsink Android RAT impersonates 50+ consumer brands.
Trending Topics
Lazarus Group's "Fake Font" campaign abuses VS Code tasks to deploy InvisibleFerret via fake coding interviews. Stanley MaaS guarantees Chrome Web Store approval for phishing extensions. Amatera Stealer spreads via fake CAPTCHA and App-V LOLBIN abuse.
Trending Topics
CVE-2026-20822
Critical
Windows Graphics Component
PRIVILEGE ESCALATION
Windows Graphics Component
Trending Topics
TRENDING TOPICS
JAN 08, 2026
Update: Malicious NPM Packages Spreading NodeCordRAT via