Megalodon Poisons 5,500+ GitHub Repos
Megalodon injects malicious workflows into 5,500+ GitHub repos, CVE-2026-26980 Ghost CMS zero-day exploited, TrapDoor plants 34 packages on npm and PyPI.
Posts tagged: Lazarus
ActiveMQ Code Injection Under Active Attack
ActiveMQ code injection exploited in the wild, 6,400 servers exposed. CISA adds 8 KEV flaws including Cisco SD-WAN. macOS LOTL techniques documented.