Critical Infra Exposed, npm Supply Chain Hit, and Defender Tools Get Smarter

News

CISA Catalogs Three Actively Exploited Vulnerabilities in Critical Infrastructure

CISA's KEV catalog keeps expanding. If you're running SAP NetWeaver or related systems, check your exposure now. This is a clear signal that nation-state actors are actively probing critical infra.

Malicious npm Packages Infect 3,200+ Developer Machines in Supply Chain Attack

Another week, another npm supply chain hit. This time it's 3,200+ machines compromised through malicious packages. Developers need automated dependency scanning and pinning strategies yesterday.

Chinese APT Exploits SAP NetWeaver Flaw for Espionage Against Global Enterprises

State-sponsored attackers are weaponizing a known SAP NetWeaver vulnerability to breach enterprise networks. If you're running SAP in production, patch immediately and hunt for lateral movement.

Gitloker Attacks Abuse GitHub Notifications to Push Malicious OAuth Apps

Attackers are abusing GitHub's notification system to trick developers into granting OAuth permissions. Review your authorized apps and enable phishing-resistant MFA.

Tools

TruffleHog Drops New Release with Enhanced Secret Detection Capabilities

TruffleHog keeps shipping improvements for secret scanning. If you're not running this in your CI pipeline, you're leaving easy wins on the table. Automate your secret hygiene.

Malcolm v25.05.0 Released: CISA's Network Analysis Platform Gets Major Update

CISA's open-source network traffic analysis tool gets a significant update. If you're building a SOC or need visibility into East-West traffic, this is worth evaluating.