Trusted development platforms, browser integrations, cloud identities, and exposed control planes drive a week of active exploitation, supply-chain compromise, agentic abuse, and financial impact. Defenders need verified remediation, access scoping, and connected telemetry across every layer.

This episode covers 29 cybersecurity stories.

Chapters:

00:00 Opening

00:37 CrowdSec Private GitHub Repos Copied in TanStack npm Supply Chain Attack

01:49 Malicious npm Packages Evade Install-Script Defenses at Runtime

02:58 Malicious Terraform Providers Distribute Go Malware via HashiCorp Registry

03:52 Compromised GitHub Actions Resume Mini Shai-Hulud Malware Execution

04:42 AI-Driven Secret Leaks Double Compared to Human-Coded Commits

05:28 Fake LastPass Authenticator GitHub Repos Spread New Rapuncel Infostealer

06:47 BragJack Exploits AI Browser Agents via Malicious Extensions

07:53 BigCommerce Alerts Merchants of Data Breach via Ribon Apps

08:53 Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

09:47 Critical Pre-Auth RCE in Orkes Conductor Actively Exploited

10:48 Critical Bifrost AI Gateway Flaw Allows Credentialless Command Execution

11:45 Check Point Fixes Critical Management Server Zero-Day Exploited in Attacks

12:32 Check Point Warns of Active Exploitation in Security Gateway VPN RCE Flaw

13:26 CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog

14:21 MikroTrick Chain Lets Attackers Control MikroTik Routers Without Credentials

15:26 CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities

16:29 CISA Warns of Active Exploitation of Three Linux Kernel Flaws

17:15 WordPress Patches Critical Flaw Allowing Remote Code Execution

18:03 Elementor WordPress CSRF Flaw Allows Admin Account Creation

18:51 EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts

19:50 Storm-3168: Cloud Attacks Using Compromised Azure Service Principals

20:41 FBI & CISA Warn on Risks of Third-Party ICS Integrators in Critical Infrastructure

21:27 North Korean WaterPlum Hackers Infected 30,000 Devices Worldwide

22:32 Contagious Interview Campaign Hits 30K Devices, Steals $10.7M Crypto

23:22 Bitget Loses $351.6M in Suspected North Korean Hack

24:10 Tracking Storm-2570's Consistent Ransomware Tradecraft

25:03 New Carbonato Botnet Uses AI Agents to Hijack Docker Hosts

25:56 Critical Vulnerabilities Discovered in Eufy Omni C20 and Omni X10 Pro

26:48 ShinyHunters exploits zero-day to breach FBI, steal sensitive data

27:42 Closing

SOC Minute: https://www.socminute.com

#Cybersecurity #SOC #SecurityNews