Threat Brief — 2026-06-28: Supply Chains Under Siege
Executive Summary: The last 72 hours are dominated by supply-chain compromise and AI-agent exploitation. The XZ Utils backdoor (CVE-2024-3094) remains the headline critical, while a new wave of attacks weaponises AI coding agents, npm packages, and third-party vendors. Russian intelligence operations continue evolving — now stealing Signal backup recovery keys and deploying fresh backdoors in Ukraine. Multiple Linux kernel privilege-escalation flaws and a large Chromium CVE batch demand patching attention.
Top Items
- CVE-2024-3094 — XZ Utils Supply-Chain Backdoor (CVSS 10.0): Malicious build-time injection in xz Utils v5.6.0–5.6.1 extracts a prebuilt object file from a disguised test fixture, modifying liblzma to intercept data. Affects any system pulling upstream tarballs of those versions. Highest-priority integrity check and rollback. NVD
- AI Coding Agents Exploited via Clean GitHub Repos: Mozilla 0DIN demonstrated a zero-code attack where a benign-looking repo triggers Claude Code / Cursor / Copilot agents to fetch and execute DNS-resolved shell payloads invisible to scanners and reviewers. Highlights a new attack surface for agentic dev workflows. BleepingComputer
- Cisco CUCM SSRF Exploited In-the-Wild (CISA KEV): A server-side request forgery flaw in Cisco Unified Communications Manager / CM SME escalates to root; CISA gave federal agencies a Sunday patch deadline. Weaponised in under 24 hours. BleepingComputer · DarkReading
- FBI/CISA: Russian Intel Stealing Signal Backup Recovery Keys: Phishing campaign attributed to Russian intelligence now coerces targets into exporting Signal Backup Recovery Keys, granting attackers access to full message history. Updated from March advisory. BleepingComputer · TheHackerNews
- PTC Windchill RCE Added to CISA KEV — Active Web Shell Attacks: Critical RCE in PTC Windchill PDMLink / FlexPLM is under active exploitation with web shells. Organisations running Windchill should patch immediately. TheHackerNews
- Polymarket $3M Frontend Supply-Chain Breach: A third-party vendor breach allowed attackers to inject a malicious script into Polymarket's frontend, draining ~$3M from customers. Full reimbursement promised. BleepingComputer
- Miasma Malware Hits npm + GitHub Actions: Evolution of the Mini Shai-Hulud family now compromises npm packages and has crossed into the Go ecosystem, extending supply-chain reach. TheHackerNews
Themes
Supply-chain convergence: XZ Utils, Polymarket's third-party vendor, Miasma/npm, and the Shop order-tracking abuse all illustrate that the weakest link — upstream packages, frontend vendors, consumer apps — is the preferred entry point. Treat integrity verification of third-party code and vendors as a first-class control.
AI agent attack surface: Multiple findings target the AI-assisted dev and security stack — malicious GitHub repos weaponising agentic coding tools, fake OpenAI org invites targeting cyber firms, and "Gaslight" macOS malware embedding prompt-injection and fake errors to confuse AI analysis. The adversarial use of AI tooling is accelerating in both offensive and defensive directions.
Russian APT evolution: Turla's new STOCKSTAY .NET backdoor deployed against Ukrainian government/military targets; Gamaredon upgrading its loader and C2 infrastructure; FBI/SSU detailing fake support-text credential theft campaigns. Expect continued capability drops against Ukraine-aligned targets.
Linux kernel privesc cluster: CVE-2026-46331 ("pedit COW"), DirtyClone (DirtyFrag family), and three tun/tap page-leak CVEs (46320–46322) all grant local privilege escalation. Patch kernel builds promptly, especially on multi-tenant or container hosts.
Chromium CVE batch: 15+ CVEs (13021–13038) across Blink, Autofill, GPU, FileSystem, WebAuthn, Bluetooth, DevTools, and Digital Credentials. Standard browser-update cadence applies; several use-after-free issues could be exploited for sandbox escape if combined with a renderer bug.