Supply-chain news — Is It Dead Yet?

Follow these headlines in your RSS/Atom reader. Included with Free; a verified account is required. Set up your feed → · Your profile →

Up to 50 matching topic groups, latest coverage first. Clear search

Recent headlines · 50

Last completed feed check: 2026-11-05T23:28:43.156Z.

2 sources could not be refreshed

Infostealers, CERT-FR. They will be retried on the next poll.

News topics ordered by latest coverage; first recorded report, key topic, publisher and linked coverage
Latest · UTC	First report	Key topic	Publisher
11-05 22:18	Phone return scams: where a real delivery and a fake return end up in a bill for you ↗Malwarebytes Labs · 2026-11-05 22:18 UTC	—	Malwarebytes Labs
11-05 22:06	NIKKE PC launcher compromise put players’ passwords and personal files at risk ↗Malwarebytes Labs · 2026-11-05 22:06 UTC	—	Malwarebytes Labs
11-05 21:34	Scammers use AI-generated images of missing pets to extort owners ↗AI security · Malwarebytes Labs · 2026-11-05 21:34 UTC	AI security	Malwarebytes Labs
11-05 16:24	Hackers backdoor Linux servers using trojanized CWP web server ↗Malware · BleepingComputer · 2026-11-05 16:24 UTC	Malware	BleepingComputer
11-05 14:00	ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration ↗Malware · Check Point Research · 2026-11-05 14:00 UTC	Malware	Check Point Research
11-05 12:10	Vizio, Samsung smart TVs seem to ignore tracking opt outs ↗Malwarebytes Labs · 2026-11-05 12:10 UTC	—	Malwarebytes Labs
11-05 11:41	Scammers capitalize on GTA 6 hype to push malware and crypto cons ↗Malware · Help Net Security · 2026-11-05 11:41 UTC	Malware	Help Net Security
11-05 09:00	A banking malware sample led researchers to an Android bug that can loop-crash phones ↗Malware · Help Net Security · 2026-11-05 09:00 UTC	Malware	Help Net Security
11-05 08:55	CISA Adds One Known Exploited Vulnerability to Catalog ↗CVE-2024-27834 · CISA Alerts & Advisories · 2026-11-05 08:55 UTC 2 more reports First recorded report: CISA Alerts & Advisories · 2026-11-04T12:00:00.000Z Related coverage: Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says ↗ The Hacker News · 2026-11-05 05:17 UTC U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog ↗ Security Affairs · 2026-11-05 08:55 UTC Article mentions: CVE-2024-27834 No unambiguous tracked-package match.	CVE-2024-27834	CISA Alerts & Advisories
11-04 21:06	Surviving cybersecurity until the end of 2026 ↗Aikido Security Blog · 2026-11-04 21:06 UTC	—	Aikido Security Blog
11-04 18:49	The fake $750 Apple Cash reward that pays out nothing ↗Malwarebytes Labs · 2026-11-04 18:49 UTC	—	Malwarebytes Labs
11-04 17:02	mSecure tells users to change passwords but won’t say why ↗Malwarebytes Labs · 2026-11-04 17:02 UTC	—	Malwarebytes Labs
11-04 16:58	NIKKE PC game launcher hacked to spread remote access, data-stealing malware ↗Malware · BleepingComputer · 2026-11-04 16:58 UTC	Malware	BleepingComputer
11-04 12:16	Chrome 157 fixes 213 security issues, including 7 critical flaws ↗CVE-2026-121035 +1 · Malwarebytes Labs · 2026-11-04 12:16 UTC Details Article mentions: CVE-2026-121229 · CVE-2026-121035 No unambiguous tracked-package match.	CVE-2026-121035 +1	Malwarebytes Labs
11-04 11:24	China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor ↗Malware · The Hacker News · 2026-11-04 11:24 UTC	Malware	The Hacker News
11-04 09:55	SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware ↗Malware · ESET WeLiveSecurity · 2026-11-04 09:55 UTC	Malware	ESET WeLiveSecurity
11-04 07:00	What AI-generated malware looks like under the microscope ↗AI security · Help Net Security · 2026-11-04 07:00 UTC	AI security	Help Net Security
11-03 22:18	Hackers hijack cPGuard autoupdate to deploy backdoor, steal data ↗Malware · BleepingComputer · 2026-11-03 22:18 UTC	Malware	BleepingComputer
11-03 17:32	Fake-download campaign uses trojanized installers to deliver monetization payloads ↗Malware · Microsoft Security Blog · 2026-11-03 17:32 UTC	Malware	Microsoft Security Blog
11-03 15:16	cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes ↗Malware · The Hacker News · 2026-11-03 15:16 UTC	Malware	The Hacker News
11-03 14:11	A hidden backdoor put 1.3 million TV boxes to work for criminals ↗Malware · Malwarebytes Labs · 2026-11-03 14:11 UTC	Malware	Malwarebytes Labs
11-03 13:36	Node-RED-servers via kritieke kwetsbaarheid geïnfecteerd met malware ↗Malware · Security.NL · 2026-11-03 13:36 UTC	Malware	Security.NL
11-03 12:01	Hackers put porn on public billboards and claim it was “far too easy” ↗Malwarebytes Labs · 2026-11-03 12:01 UTC	—	Malwarebytes Labs
11-03 11:26	Revolve card breach: 1.5 million people may be affected ↗Leaks & breaches · Malwarebytes Labs · 2026-11-03 11:26 UTC	Leaks & breaches	Malwarebytes Labs
11-03 11:00	Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware ↗Malware · The Hacker News · 2026-11-03 11:00 UTC	Malware	The Hacker News
11-03 10:47	Linux-servers met securitysoftware cPGuard via update besmet met malware ↗Malware · Security.NL · 2026-11-03 10:47 UTC	Malware	Security.NL
11-03 10:00	Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware ↗Malware · Help Net Security · 2026-11-03 10:00 UTC	Malware	Help Net Security
11-03 09:52	Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers ↗Security Affairs · 2026-11-03 09:52 UTC	—	Security Affairs
11-02 22:55	Max-severity bug in widely used OT programming tool exploited to deliver Linux malware ↗CVE-2019-17558 +1 · The Register Security · 2026-11-02 22:55 UTC Details Article mentions: CVE-2026-58115 · CVE-2019-17558 No unambiguous tracked-package match.	CVE-2019-17558 +1	The Register Security
11-02 18:34	VOLTA, the infostealer that asks an AI which victims are worth the effort ↗AI security · Security Affairs · 2026-11-02 18:34 UTC	AI security	Security Affairs
11-02 18:16	Google disrupts million-device XCPE Android malware botnet, bans TV box maker ↗Malware · BleepingComputer · 2026-11-02 18:16 UTC	Malware	BleepingComputer
11-02 14:52	Polymarket betaalt gebruikers 3,9 miljoen dollar wegens malware op website ↗Malware · Security.NL · 2026-11-02 14:52 UTC	Malware	Security.NL
11-02 14:24	5 stars for sale: Inside the underground fake review trade ↗Malwarebytes Labs · 2026-11-02 14:24 UTC	—	Malwarebytes Labs
11-02 14:22	Applebee’s customer data exposed by password left in app ↗Leaks & breaches · Malwarebytes Labs · 2026-11-02 14:22 UTC	Leaks & breaches	Malwarebytes Labs
11-02 14:15	Google: 1,3 miljoen Android tv-boxes bewust geleverd met backdoor ↗Malware · Security.NL · 2026-11-02 14:15 UTC	Malware	Security.NL
11-02 08:01	A week in security (October 26 – November 1) ↗Roundup · Malwarebytes Labs · 2026-11-02 08:01 UTC	Roundup	Malwarebytes Labs
11-01 17:25	SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121 ↗Roundup · Security Affairs · 2026-11-01 17:25 UTC	Roundup	Security Affairs
11-01 07:22	Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines ↗Malware · StepSecurity Blog · 2026-11-01 07:22 UTC	Malware	StepSecurity Blog
11-01 07:02	NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection ↗Malware · The Hacker News · 2026-11-01 07:02 UTC	Malware	The Hacker News
10-31 01:02	Inside a malicious Claude Code-branded extension and its persistent SSH backdoor ↗Malware · Microsoft Security Blog · 2026-10-31 01:02 UTC	Malware	Microsoft Security Blog
10-30 21:22	Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries ↗Malware · Security Affairs · 2026-10-30 21:22 UTC	Malware	Security Affairs
10-30 21:09	Anthropic VS code extension on Cursor backdoored for nearly 12 hours ↗Malware · Ars Technica Security · 2026-10-30 21:09 UTC	Malware	Ars Technica Security
10-30 15:25	Fake PDF and search tools hijacked searches for 13.4 million Chrome users ↗Malwarebytes Labs · 2026-10-30 15:25 UTC	—	Malwarebytes Labs
10-30 14:36	Malicious Claude Code extension on Cursor planted SSH backdoors ↗Malware · BleepingComputer · 2026-10-30 14:36 UTC	Malware	BleepingComputer
10-30 14:33	Malware op website Polymarket steelt ruim 2 miljoen dollar van gebruikers ↗Malware · Security.NL · 2026-10-30 14:33 UTC	Malware	Security.NL
10-30 13:08	Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert ↗Malware · Heise Security · 2026-10-30 13:08 UTC	Malware	Heise Security
10-30 13:00	Photo ID, bank checks, face scan? The UK’s age-check options ↗Malwarebytes Labs · 2026-10-30 13:00 UTC	—	Malwarebytes Labs
10-30 12:36	Hackers target government Windows systems in Asia with new malware ↗Malware · The Record by Recorded Future · 2026-10-30 12:36 UTC	Malware	The Record by Recorded Future
10-30 12:24	Binance hit by largest-ever crypto theft, with $6.3 billion stolen ↗Leaks & breaches · Malwarebytes Labs · 2026-10-30 12:24 UTC	Leaks & breaches	Malwarebytes Labs
10-30 11:33	Hackers steal and publish data on 41,000 Homeland Security workers ↗Leaks & breaches · Malwarebytes Labs · 2026-10-30 11:33 UTC	Leaks & breaches	Malwarebytes Labs

Reviewed incident reports · 0

Last reviewed 2026-10-08. Selected historical incidents; a past compromise does not establish that a current release is compromised.

No reviewed stories match these filters. This does not mean no incidents have occurred.

About this feed and search

Search stored headlines, publishers, article mentions and matched package names, plus reviewed-report summaries. Full article bodies are not searchable. Coverage with the same specific topic is grouped within a 72-hour episode. Each row links to its earliest recorded report; later coverage is linked under Details. Roundups, generic platforms and separate campaign waves are not merged on a broad mention alone. Multiple reports are not independent corroboration. Ecosystem filtering uses package matches, so unmatched articles are excluded when you select an ecosystem.

Article mentions identify terms, not confirmed affected products or versions. Package links are automated leads, not confirmed vulnerability findings. Maintenance checks do not prove an affected version is safe.

Selected vulnerability advisories · 0

Sources and package mappings checked 2026-10-08. This is a manually reviewed selection of historical advisories, not a current exploitation ranking or complete CVE database. The news headlines above update separately.

An identity match is a reason to investigate, not confirmation that your installed release is vulnerable. Manifest checks do not establish runtime configuration or resolve every transitive dependency.

Vulnerability	Product / package relationship

No selected advisories match these filters. This is not a security clearance.

Runtime advisories on OpenCVE

Browse CVEs by vendor and product. Runtime CVEs do not automatically apply to every package in that ecosystem; verify affected versions and configurations.

News sources · 81 configured feeds

The news worker checks for due feeds one minute after each completed run. Individual feeds use one-, two- or ten-minute intervals; slow requests can delay a check. Clear tracked-package mentions trigger priority checks; they do not establish that an installed version is vulnerable. Sources without an RSS link and Feedspot’s directory are browsing resources. Reviewed reports above remain curated.

Security news and research

Recent headlines · 50

Phone return scams: where a real delivery and a fake return end up in a bill for you ↗Malwarebytes Labs · 2026-11-05 22:18 UTC

NIKKE PC launcher compromise put players’ passwords and personal files at risk ↗Malwarebytes Labs · 2026-11-05 22:06 UTC

Scammers use AI-generated images of missing pets to extort owners ↗AI security · Malwarebytes Labs · 2026-11-05 21:34 UTC

Hackers backdoor Linux servers using trojanized CWP web server ↗Malware · BleepingComputer · 2026-11-05 16:24 UTC

ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration ↗Malware · Check Point Research · 2026-11-05 14:00 UTC

Vizio, Samsung smart TVs seem to ignore tracking opt outs ↗Malwarebytes Labs · 2026-11-05 12:10 UTC

Scammers capitalize on GTA 6 hype to push malware and crypto cons ↗Malware · Help Net Security · 2026-11-05 11:41 UTC

A banking malware sample led researchers to an Android bug that can loop-crash phones ↗Malware · Help Net Security · 2026-11-05 09:00 UTC

CISA Adds One Known Exploited Vulnerability to Catalog ↗CVE-2024-27834 · CISA Alerts & Advisories · 2026-11-05 08:55 UTC

Surviving cybersecurity until the end of 2026 ↗Aikido Security Blog · 2026-11-04 21:06 UTC

The fake $750 Apple Cash reward that pays out nothing ↗Malwarebytes Labs · 2026-11-04 18:49 UTC

mSecure tells users to change passwords but won’t say why ↗Malwarebytes Labs · 2026-11-04 17:02 UTC

NIKKE PC game launcher hacked to spread remote access, data-stealing malware ↗Malware · BleepingComputer · 2026-11-04 16:58 UTC

Chrome 157 fixes 213 security issues, including 7 critical flaws ↗CVE-2026-121035 +1 · Malwarebytes Labs · 2026-11-04 12:16 UTC

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor ↗Malware · The Hacker News · 2026-11-04 11:24 UTC

SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware ↗Malware · ESET WeLiveSecurity · 2026-11-04 09:55 UTC

What AI-generated malware looks like under the microscope ↗AI security · Help Net Security · 2026-11-04 07:00 UTC

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data ↗Malware · BleepingComputer · 2026-11-03 22:18 UTC

Fake-download campaign uses trojanized installers to deliver monetization payloads ↗Malware · Microsoft Security Blog · 2026-11-03 17:32 UTC

cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes ↗Malware · The Hacker News · 2026-11-03 15:16 UTC

A hidden backdoor put 1.3 million TV boxes to work for criminals ↗Malware · Malwarebytes Labs · 2026-11-03 14:11 UTC

Node-RED-servers via kritieke kwetsbaarheid geïnfecteerd met malware ↗Malware · Security.NL · 2026-11-03 13:36 UTC

Hackers put porn on public billboards and claim it was “far too easy” ↗Malwarebytes Labs · 2026-11-03 12:01 UTC

Revolve card breach: 1.5 million people may be affected ↗Leaks & breaches · Malwarebytes Labs · 2026-11-03 11:26 UTC

Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware ↗Malware · The Hacker News · 2026-11-03 11:00 UTC

Linux-servers met securitysoftware cPGuard via update besmet met malware ↗Malware · Security.NL · 2026-11-03 10:47 UTC

Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware ↗Malware · Help Net Security · 2026-11-03 10:00 UTC

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers ↗Security Affairs · 2026-11-03 09:52 UTC

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware ↗CVE-2019-17558 +1 · The Register Security · 2026-11-02 22:55 UTC

VOLTA, the infostealer that asks an AI which victims are worth the effort ↗AI security · Security Affairs · 2026-11-02 18:34 UTC

Google disrupts million-device XCPE Android malware botnet, bans TV box maker ↗Malware · BleepingComputer · 2026-11-02 18:16 UTC

Polymarket betaalt gebruikers 3,9 miljoen dollar wegens malware op website ↗Malware · Security.NL · 2026-11-02 14:52 UTC

5 stars for sale: Inside the underground fake review trade ↗Malwarebytes Labs · 2026-11-02 14:24 UTC

Applebee’s customer data exposed by password left in app ↗Leaks & breaches · Malwarebytes Labs · 2026-11-02 14:22 UTC

Google: 1,3 miljoen Android tv-boxes bewust geleverd met backdoor ↗Malware · Security.NL · 2026-11-02 14:15 UTC

A week in security (October 26 – November 1) ↗Roundup · Malwarebytes Labs · 2026-11-02 08:01 UTC

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121 ↗Roundup · Security Affairs · 2026-11-01 17:25 UTC

Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines ↗Malware · StepSecurity Blog · 2026-11-01 07:22 UTC

NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection ↗Malware · The Hacker News · 2026-11-01 07:02 UTC

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor ↗Malware · Microsoft Security Blog · 2026-10-31 01:02 UTC

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries ↗Malware · Security Affairs · 2026-10-30 21:22 UTC

Anthropic VS code extension on Cursor backdoored for nearly 12 hours ↗Malware · Ars Technica Security · 2026-10-30 21:09 UTC

Fake PDF and search tools hijacked searches for 13.4 million Chrome users ↗Malwarebytes Labs · 2026-10-30 15:25 UTC

Malicious Claude Code extension on Cursor planted SSH backdoors ↗Malware · BleepingComputer · 2026-10-30 14:36 UTC

Malware op website Polymarket steelt ruim 2 miljoen dollar van gebruikers ↗Malware · Security.NL · 2026-10-30 14:33 UTC

Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert ↗Malware · Heise Security · 2026-10-30 13:08 UTC

Photo ID, bank checks, face scan? The UK’s age-check options ↗Malwarebytes Labs · 2026-10-30 13:00 UTC

Hackers target government Windows systems in Asia with new malware ↗Malware · The Record by Recorded Future · 2026-10-30 12:36 UTC

Binance hit by largest-ever crypto theft, with $6.3 billion stolen ↗Leaks & breaches · Malwarebytes Labs · 2026-10-30 12:24 UTC

Hackers steal and publish data on 41,000 Homeland Security workers ↗Leaks & breaches · Malwarebytes Labs · 2026-10-30 11:33 UTC