SecurityHorrors | BlogStories you never want to feel on your own skinhttps://securityhorrors.com/en-usMegalodon: 5,561 Repos Swallowed in Six Hourshttps://securityhorrors.com/all/github-megalodon-ci-backdoor/https://securityhorrors.com/all/github-megalodon-ci-backdoor/TLDR and details on the Megalodon supply chain attack mass-backdooring GitHub repositories via malicious CI/CD workflow commits.Fri, 22 May 2026 00:09:00 GMTChromium: The Tab That Never Really Closedhttps://securityhorrors.com/all/chromium-background-js-after-close/https://securityhorrors.com/all/chromium-background-js-after-close/TLDR and details on a Chromium vulnerability allowing attackers to run JavaScript in the background even after the browser is closed.Fri, 22 May 2026 00:06:00 GMTBIND 9: Three Cracks in the Resolver Wallhttps://securityhorrors.com/all/bind9-dns-cpu-denial-of-service/https://securityhorrors.com/all/bind9-dns-cpu-denial-of-service/TLDR and affected version summary for three BIND 9 DNS resolver vulnerabilities causing denial of service via high CPU usage.Fri, 22 May 2026 00:03:00 GMTDrupal: The Postgres Backdoor Queryhttps://securityhorrors.com/all/drupal-postgresql-sql-injection/https://securityhorrors.com/all/drupal-postgresql-sql-injection/TLDR and affected version summary for CVE-2026-9082, a SQL injection vulnerability in Drupal affecting PostgreSQL deployments.Fri, 22 May 2026 00:00:00 GMTGitHub: The Extension That Opened the Vaulthttps://securityhorrors.com/all/github-malicious-extension-repo-breach/https://securityhorrors.com/all/github-malicious-extension-repo-breach/TLDR and impact summary for the GitHub internal repository breach caused by a malicious VS Code extension installed by a GitHub developer.Wed, 20 May 2026 00:08:00 GMTComposer: Tokens Spilled on the CI Stagehttps://securityhorrors.com/all/composer-github-token-leak-ci/https://securityhorrors.com/all/composer-github-token-leak-ci/TLDR and affected version summary for CVE-2026-45793, a Composer vulnerability that may expose GitHub authentication tokens in CI logs.Wed, 20 May 2026 00:04:00 GMTNGINX njs: One Overflow to Crash Them Allhttps://securityhorrors.com/all/nginx-njs-heap-overflow-crash/https://securityhorrors.com/all/nginx-njs-heap-overflow-crash/TLDR and affected version summary for CVE-2026-8711, a heap buffer overflow in NGINX JavaScript (njs) that can crash workers and may allow RCE.Wed, 20 May 2026 00:00:00 GMTMini Shai-Hulud: 639 Packages Deep and Still Burrowinghttps://securityhorrors.com/all/mini-shai-hulud-antv-wave/https://securityhorrors.com/all/mini-shai-hulud-antv-wave/TLDR and affected package summary for the latest wave of the Mini Shai-Hulud npm supply-chain campaign targeting antv and echarts-for-react.Tue, 19 May 2026 00:08:00 GMTNx Console: One Stolen Token, One Poisoned Marketplacehttps://securityhorrors.com/all/nx-console-marketplace-compromise/https://securityhorrors.com/all/nx-console-marketplace-compromise/TLDR and affected version summary for the Nx Console VS Code extension compromise via a contributor's leaked GitHub PAT.Tue, 19 May 2026 00:04:00 GMTVoidStealer: Reaching Past Chrome's Encryptionhttps://securityhorrors.com/all/chrome-voidstealer-abe-bypass/https://securityhorrors.com/all/chrome-voidstealer-abe-bypass/TLDR and details on VoidStealer, an infostealer bypassing Chrome's App-Bound Encryption to extract credentials and session data.Tue, 19 May 2026 00:00:00 GMTPostgreSQL: Eleven Stitches on a Quiet Afternoonhttps://securityhorrors.com/all/postgresql-eleven-stitches/https://securityhorrors.com/all/postgresql-eleven-stitches/TLDR and affected version summary for the 11 CVEs patched in the May 14, 2026 PostgreSQL release.Thu, 14 May 2026 00:08:00 GMTFragnesia and ssh-keysign-pwn: Two More Bones Under the Kernelhttps://securityhorrors.com/all/linux-fragnesia-ssh-keysign-pwn/https://securityhorrors.com/all/linux-fragnesia-ssh-keysign-pwn/TLDR and affected system summary for Fragnesia (CVE-2026-46300) and ssh-keysign-pwn (CVE-2026-46333).Thu, 14 May 2026 00:01:00 GMTShadow Supply: The Package That Stole Your Secretshttps://securityhorrors.com/all/node-ipc-shadow-supply-credential-stealer/https://securityhorrors.com/all/node-ipc-shadow-supply-credential-stealer/TLDR and affected version summary for the node-ipc npm supply-chain compromise.Thu, 14 May 2026 00:00:00 GMTNGINX: Three Cracks in the Proxy Wallhttps://securityhorrors.com/all/nginx-three-cracks-proxy-wall/https://securityhorrors.com/all/nginx-three-cracks-proxy-wall/TLDR and affected version summary for NGINX Rift, CVE-2026-42926, and CVE-2026-42946Wed, 13 May 2026 00:00:00 GMTMini Shai-Hulud: The Package That Crawled Through CIhttps://securityhorrors.com/all/mini-shai-hulud-supply-chain-worm/https://securityhorrors.com/all/mini-shai-hulud-supply-chain-worm/TLDR and affected package summary for the Mini Shai-Hulud npm and PyPI supply-chain campaign.Mon, 11 May 2026 00:00:00 GMTReact and Next.js: Thirteen Doors Left Openhttps://securityhorrors.com/all/react-nextjs-may-2026-security-release/https://securityhorrors.com/all/react-nextjs-may-2026-security-release/TLDR and affected version summary for the May 2026 React and Next.js security advisories.Thu, 07 May 2026 00:01:00 GMTDirty Frag: Two Kernel Teeth Under the Floorboardshttps://securityhorrors.com/all/linux-dirty-frag-kernel-lpe/https://securityhorrors.com/all/linux-dirty-frag-kernel-lpe/TLDR and affected system summary for Dirty Frag, CVE-2026-43284 and CVE-2026-43500.Thu, 07 May 2026 00:00:00 GMTBleeding Llama: The Local AI That Remembered Too Muchhttps://securityhorrors.com/all/ollama-bleeding-llama-memory-leak/https://securityhorrors.com/all/ollama-bleeding-llama-memory-leak/TLDR and affected version summary for CVE-2026-7482, the Bleeding Llama vulnerability in Ollama.Fri, 01 May 2026 00:00:00 GMTCopyFail: Root Was Only 732 Bytes Awayhttps://securityhorrors.com/all/linux-copyfail-root-escalation/https://securityhorrors.com/all/linux-copyfail-root-escalation/TLDR and affected system summary for CVE-2026-31431, the Linux CopyFail local privilege escalation.Wed, 29 Apr 2026 00:00:00 GMT