Software supply-chain compromise was again prominent in today's incidents. Fourteen trojanized npm packages disguised as calendar utilities delivered RedShell, the Linux implant for the AI-driven RedC2 4.0 framework. The packages required only an import anywhere in the dependency graph, rather than an install hook, placing the loader outside the coverage of --ignore-scripts. The campaign followed yesterday's Rust crate poisoning, where a compromised maintainer account was used to add a malicious dependency to a widely downloaded package. In both cases, attackers used legitimate package distribution mechanisms to deliver malware.

Identity and access-control flaws were also reported across several vendors. Microsoft's maximum-severity Entra ID deserialisation flaw, Cisco's five critical-to-high Secure Workload and Crosswork vulnerabilities, and Citrix's NetScaler authentication bypass all affected systems responsible for controlling access. Separately, six paid miniOrange plugin editions remained exposed for weeks because their separate version lines were not tracked in a public vulnerability database.

Microsoft patched CVE-2026-69836, a critical Entra ID deserialisation flaw carrying a maximum CVSS score of 10.0. The vulnerability allowed unauthorised remote code execution over the network without requiring authentication or user interaction. Microsoft confirmed the flaw was not exploited in the wild and has fully mitigated it, requiring no customer action.

Citrix disclosed CVE-2026-19489 and CVE-2026-19490, affecting customer-managed NetScaler ADC and Gateway deployments. The first is a memory overflow flaw triggering denial of service when SIP ALG is enabled on large-scale NAT configurations. The second is an authentication bypass affecting Gateway or AAA virtual servers, with fixed builds now available for affected versions.

Two critical authentication bypasses in the miniOrange SAML 2.0 Single Sign On plugin allowed attackers to forge assertions and log in as any WordPress user, including administrators. CVE-2026-61979 exploited signature algorithm confusion, while CVE-2026-15981 misread an OpenSSL error code as valid. DigitalOcean found the plugin ships seven separately versioned editions under one listing, so only the free edition's fix appeared in public vulnerability databases.

A malicious YouTube video ad impersonating TradingView delivered a macOS implant via a fake installer package. The malware installs a persistent LaunchAgent, escalates to root using a captured sudo password, and runs a Node.js payload shipped as encrypted V8 bytecode. Six native modules enable keylogging, screen capture, keychain access and a local TLS-intercepting proxy trusted through a rogue root certificate.

Kaspersky discovered Android malware distributed through the built-in updater of DoFun car head unit firmware, marking the first documented case on this device type. The multi-stage downloader deploys a reverse proxy module for ad fraud and botnet activity, attributed with high confidence to MoYu Group, an actor linked to the BADBOX botnet. The vendor has since fixed the distribution flaw after being notified.

Trend AI Research identified trojanized npm packages disguised as date-calculation utilities that silently launch a bundled Linux implant on import, bypassing --ignore-scripts protections. The payload is RedShell, the Linux implant for the RedC2 4.0 command-and-control framework, sold on Hack Forums with cross-platform support. RedC2 includes Red Agent, an AI assistant that converts natural-language prompts into chained post-exploitation commands.