This report outlines four emerging cyber threats shaping the future security landscape: artificial intelligence (AI)-driven attacks, supply-chain and third-party risks, the future impact of quantum computing on encryption, and geopolitical conflicts targeting critical infrastructure. It emphasizes the need for organizations to build resilience as a continuous operational objective rather than relying on single tools or policies. The threats include AI-enabled automation of attacks and deepfakes, supply-chain compromises that exploit trusted vendor relationships, the long-term risk of quantum computers breaking current cryptography, and nation-state cyberattacks and disinformation campaigns. The report advises proactive mitigation strategies tailored to each threat area.
This document analyzes multiple cybersecurity incidents involving various threat actors and malicious campaigns. The analysis covers sophisticated attack methodologies including exploitation of vulnerabilities, deployment of specialized malware tools, and targeting of critical infrastructure across multiple sectors. The campaigns demonstrate advanced persistent threat capabilities with focus on data exfiltration, system compromise, and lateral movement within targeted networks. Key observations include the use of social engineering tactics, exploitation of remote access vulnerabilities, and deployment of custom malware frameworks. The threat landscape encompasses government, technology, financial, and defense sectors with significant emphasis on supply chain attacks and credential harvesting operations.
French cybersecurity firm CrowdSec confirmed that approximately 300 of its GitHub repositories, including about 170 private ones, were compromised in a supply chain attack linked to the May 2026 TanStack incident. Source code for CrowdSec's SaaS console, AWS Cloud routines, connectors, and automations was stolen. No customer credentials or data were leaked, and the stolen code cannot be used out of context to cause harm. CrowdSec rotated all potentially affected tokens and credentials immediately after discovery and continues to monitor for abnormal activity.
A malware campaign involving the npm package 'indexed-btree' demonstrates how attackers evade traditional supply chain defenses by embedding malicious code in the package's runtime behavior instead of installation scripts. This technique allows the malware to bypass install-time security checks and execute malicious actions during normal package usage.
Brevo, a customer engagement platform, suffered a supply chain attack where attackers exploited a vulnerability in SAML SSO to gain access to accounts and later used a compromised Cloudflare API key to deploy malicious scripts. These scripts were injected into Brevo's websites and JavaScript files embedded by over 100,000 customer websites. The malicious code showed a fake Cloudflare verification page to visitors, attempting to trick them into running commands on their machines (ClickFix social engineering). The attack lasted about five and a half hours before Brevo revoked the compromised credentials and removed the malicious worker. The incident highlights risks from compromised API keys and supply chain vulnerabilities.
Brevo experienced a supply-chain attack where attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into Brevo's websites and JavaScript files embedded on customer sites. This injection was used to distribute malware to visitors of affected sites.
Ransomware attacks targeting the manufacturing sector surged by 40% in early 2026, exploiting supply chain disruptions caused by operational shutdowns. Mid-sized manufacturers, which serve as suppliers to larger enterprises, are primary targets due to their critical role in production lines. These attacks cause immediate operational impacts, including production halts and disrupted delivery commitments, which strengthen attackers' negotiating positions. The number of ransomware groups is increasing, with new groups like The Gentlemen responsible for a significant portion of attacks. Europe has seen an 85% increase in attacks, particularly in Germany, Italy, the UK, and France. The distribution sector also faces ransomware threats, though at lower volumes. Supply chain victims often cannot patch vulnerabilities themselves, complicating remediation efforts. Legislative efforts, such as the UK’s Cyber Security and Resilience Bill, aim to mitigate supply chain risks by enforcing security standards on providers. Overall, ransomware attacks on manufacturing and distribution sectors are rising, with growing attacker sophistication and expanding attack surfaces.
Oracle released its September 2026 Critical Security Patch Update (CSPU) addressing 672 unique CVEs with 673 patches across 17 product families. The update includes 104 critical severity patches and 503 high severity patches. Oracle E-Business Suite received the highest number of patches (159), followed by Oracle Fusion Middleware (153). Several vulnerabilities can be exploited remotely without authentication. Patches are available in the official advisory.
An attacker operates a semi-autonomous coding agent that identifies poorly secured large language model (LLM) resale gateways, acquires API access through common web vulnerabilities and account farming, validates the inference capacity, and aggregates it behind a single unified gateway. This creates a partially self-expanding supply chain of stolen inference capacity, where the agent continuously harvests and consolidates LLM access to support further operations. The attacker’s infrastructure includes hundreds of compromised endpoints mapped to standard model names, served through a single proxy with failover and load balancing. The operation was uncovered through an AI honeypot that captured the agent’s operational playbook and infrastructure details.
Cisco Talos is tracking a cryptocurrency theft campaign that abuses the Google Visualization API to deliver obfuscated JavaScript from Google Sheets, which victims are socially engineered to inject into their browser sessions. The attack uses a variation of ClickFix social engineering, convincing targets to paste malicious JavaScript into the Chrome address bar or install it via the Tampermonkey extension for persistence. The malicious script acts as a web skimmer, hooking the browser's fetch API to replace cryptocurrency deposit addresses and manipulate clipboard contents, deceiving users with fake bonus interfaces. The campaign targets users on cryptocurrency and hacking forums with a lure about a nonexistent API vulnerability to entice quick financial gain. The actors moved their hosting to Google Docs and Sheets after disruptions on paste sites. While this campaign primarily targets individuals, the techniques used could be adapted for broader supply-chain or web-based attacks.
AIR Security is a startup that has developed a specialized firewall designed to protect AI agents by evaluating AI skills, plugins, and MCP servers for malicious instructions, excessive permissions, and software supply chain risks. The firewall continuously monitors and analyzes AI add-ons before and after deployment to detect malicious or vulnerable components and revoke trust if needed. This addresses emerging security challenges as AI agents autonomously connect to tools, data, and services, potentially exposing enterprises to data theft, fraud, or unauthorized access. AIR Security recently emerged from stealth with $50 million in funding and aims to provide enterprises with visibility and control over AI agent supply chains.
The UK government is amending the Cyber Security and Resilience Bill to empower ministers to block technology suppliers deemed high risk from critical infrastructure sectors. This legislative change responds to increasing supply chain attacks, including a recent incident where a UK energy facility was taken offline for four days. The amendments aim to enhance national resilience by holding third-party suppliers accountable and preventing critical organizations from using inadequately secure vendors. The focus is on reducing supply chain vulnerabilities by restricting access to critical infrastructure from risky suppliers, particularly targeting smaller suppliers that may serve as weak points.
A new Mini Shai-Hulud worm variant named Trinitite was detected targeting the npm package @7nohe/openapi-react-query-codegen. The attacker exploited a GitHub workflow vulnerability allowing any user to trigger npm publish via pull-request comments, resulting in rapid publication of malicious package versions. The worm uses obfuscation techniques to execute even when scripts are disabled, steals credentials from multiple developer and cloud platforms, and exfiltrates data via GitHub commits. It establishes persistence through systemd services and includes a destructive token revoke mechanism that can wipe user directories. This campaign is linked to the TeamPCP threat actor and appeared shortly after arrests of related suspects in Australia.
A federal judge ruled that the Pentagon's designation of AI company Anthropic as a supply chain risk was illegal and baseless. The ruling found that the government's actions were retaliatory, based on Anthropic's criticism of the Department of Defense's AI policies rather than any concrete security concerns. This legal dispute highlights tensions over AI use in military applications and government attempts to restrict Anthropic's technology. The Pentagon is expected to appeal the decision. No direct technical vulnerability or exploit is involved in this case.
An attacker exploited a flawed GitHub Actions workflow in the npm package @7nohe/openapi-react-query-codegen to publish 10 malicious versions. The vulnerability stemmed from an issue_comment trigger lacking author-association checks, allowing arbitrary users to trigger npm publishing from forked repositories. The malicious payload used multiple execution methods, including a binding.gyp file exploiting node-gyp's Python evaluation and a preinstall hook, ultimately delivering a large obfuscated script that downloaded Bun v1.4.0. This attack aligns with the Mini Shai-Hulud toolkit previously seen in other supply chain compromises. All malicious versions have been removed from npm.
This analysis discusses the emerging threat posed by quantum computing to current public-key cryptographic algorithms such as RSA, ECC, and Diffie-Hellman. Although fully capable quantum computers are not yet available, adversaries are already collecting encrypted data to decrypt later once quantum capabilities mature, a tactic known as "harvest now, decrypt later" (HNDL). Regulatory bodies, including the U.S. government via Executive Order 14412, are mandating accelerated migration to quantum-resistant cryptography and require comprehensive cryptographic inventories. The transition to post-quantum cryptography involves a phased operational strategy including discovery, prioritization, remediation, and verification. Symmetric encryption like AES-256 is expected to remain secure against quantum attacks. The threat is recognized as an operational risk today, necessitating proactive organizational measures.
Australian authorities arrested two men allegedly involved with the TeamPCP hacking group, which conducted widespread supply-chain attacks targeting open-source software and developer platforms. The group injected malicious code into software repositories, compromising over a thousand organizations globally and stealing credentials and data. The attacks impacted high-profile targets including Trivy, LiteLLM, SAP, OpenAI, and the European Commission. The suspects face multiple charges related to computer offenses and criminal proceeds. The investigation is ongoing, with further arrests possible.
Two men in Australia were arrested for their alleged involvement in TeamPCP, a cybercrime syndicate responsible for extensive software supply chain attacks. TeamPCP embedded malicious code in numerous open source software tools, compromising thousands of global businesses. The group used a self-propagating worm called Shai-Hulud to infect open source projects and steal developer credentials, enabling further malicious code insertion. They also ran a contest to recruit additional hackers by incentivizing supply chain compromises. Their attacks included targeting AI infrastructure via the LiteLLM open source AI gateway, harvesting cloud service keys from over 2,500 organizations. TeamPCP compromised thousands of code repositories on GitHub by exploiting compromised developer tools. The group appears to be a loose coalition of multiple cybercriminal actors rather than a single structured entity.
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]
This analysis discusses the increasing threat of supply chain attacks targeting the software development lifecycle (SDLC), specifically focusing on CI/CD pipelines, developer tools, and package managers rather than finished application code. Attackers use sophisticated methods such as malicious preinstall scripts, memory scraping for credentials, and self-propagating worms like the ChainDrop npm worm to compromise developer environments and build pipelines. These attacks exploit the high privileges of developer tools and the lack of sandboxing, enabling attackers to steal secrets, backdoor endpoints, and propagate malware silently. The report emphasizes the need for continuous visibility and strict security controls across developer endpoints, build pipelines, and cloud runtimes to effectively mitigate these evolving threats.