A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that ...

A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes ...

The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

A new version of CloudZ RAT uses a malicious plugin called Pheno to extract sensitive data from Windows PCs by abusing ...

I used vibe coding to take control of my subscriptions.

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

Multiple SAP npm packages were compromised in a supply chain attack designed to steal developer credentials and tokens.

Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...

Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...