This weekly threat intelligence report covers multiple active campaigns and critical vulnerabilities. Notable items include a large-scale npm supply-chain compromise (Shai-Hulud CHAINDROP) affecting 400+ packages, critical vulnerabilities in AI coding tools (Gemini CLI and Claude Code), a vendor-installed backdoor in Zbtlink routers, and a macOS ClickFix campaign distributing infostealers via 250+ look-alike domains. Multiple critical patches were released for Cisco SD-WAN/IOS XE, WordPress, and TP-Link Omada products.
router backdoor
1 post
10th August – Threat Intelligence Report