Edge Exploits, Supply Chain Hijacks, and Defender Tools Get Sharper

News

CISA Adds Three Critical Vulnerabilities to Known Exploited Catalog

CISA continues to flag critical vulnerabilities actively exploited in the wild, giving defenders a clear prioritization list. This is mandatory reading for any security team patching edge or legacy systems.

Gitloker Campaign Weaponizes GitHub Notifications to Hijack OAuth Apps

Gitloker attackers are weaponizing GitHub notifications to trick developers into installing malicious OAuth apps—a sophisticated escalation from the usual phishing playbook. This shifts the trust model for how teams manage repository access and integrations.

Malicious npm Packages Infect Thousands of Developers in Supply Chain Attack

A fresh npm supply chain attack has infected over 3,200 developers, showing that package ecosystems remain a soft target. This reinforces the need for dependency scanning and pinned versions in your build workflows.

Analysis

Chinese Hackers Exploit SAP NetWeaver Vulnerability in Enterprise Espionage

Chinese APTs are actively exploiting SAP NetWeaver vulnerabilities, targeting enterprise backbones with surgical precision. If you're running SAP in a critical environment, assume breach and audit your network segmentation yesterday.

Tools

TruffleHog Drops New Secrets Detection Capabilities for CI/CD Pipelines

The latest TruffleHog release sharpens secrets detection capabilities, letting teams find leaked credentials before attackers do. It's a straightforward, high-leverage tool for hardening CI/CD pipelines and developer workflows.

CISA's Malcolm Network Analysis Suite Gets Major v25.05 Update

Malcolm v25.05.0 brings improved network traffic analysis from CISA, giving defenders deeper visibility into what's actually happening on their networks. It's a solid open-source option for teams that want more than just basic logging.