<p><strong>TLDR:</strong> CVE-2026-20230 in Cisco Unified CM’s WebDialer is being actively exploited with no authentication required, with automated sweeps observed within two days of public PoC release — upgrade to 14SU6 or apply the Release 15 COP patch now. The Klue supply chain breach is getting messier: the original Icarus group claims to be deleting stolen data, but a second unnamed group has emerged demanding ransoms from affected companies including LastPass, HackerOne, and Huntress. On the supply chain front, 20 Leo Platform npm packages were backdoored in a coordinated three-second burst using the same Phantom Gyp toolkit as the June 3 Miasma campaign, with the payload functioning as a worm that republishes malicious versions to any package the victim can publish. The Linux Foundation launched Akrites, a coordinated SIRT backed by AWS, Google, Microsoft, Anthropic, and OpenAI, to handle vulnerability disclosure for critical open source packages before AI-assisted scanning floods maintainers.</p>
<hr>
<h2>CVE-2026-20230: Cisco Unified CM SSRF exploited in the wild, webshells dropped via three-stage chain</h2>
<p>Attackers are actively exploiting this unauthenticated SSRF in the WebDialer component, running a three-stage chain: abuse the SSRF to install a rogue Apache Axis service, write a JSP file-writer to disk, then drop a persistent command-execution webshell into the axis2-web directory. Exploitation started around June 22-23, roughly two days after public PoC code circulated, with Tor-anonymized automated sweeps already hitting honeypots. Release 14 users need 14SU6 (available since June 3); Release 15 users need the interim COP patch. Check for unexpected .jsp files in /platform-services/axis2-web/ and unfamiliar Axis service entries — any exposed unpatched instance should be treated as already compromised. <a href="https://daily.dev/posts/Hq2CEAoYv" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Klue breach: Icarus claims to delete data, second extortion group emerges with ransom demands</h2>
<p>The Klue supply chain compromise — rooted in a 2022 third-party credential that was never revoked, granting OAuth access to customer Salesforce environments — is now a multi-actor situation. The original Icarus group says it’s deleting the stolen data, but a second unnamed group claims to have obtained it from Icarus and is threatening to leak everything unless affected companies pay. Icarus told Klue the second group only has samples for a subset of customers, not the full dataset, and advised against paying. Confirmed victims include Gong, Jamf, HackerOne, Huntress, LastPass, Snyk, and Recorded Future. If you’re investigating exposure, Huntress published IOCs including IP addresses and User-Agent strings. <a href="https://daily.dev/feed-by-ids?id=m10dJZWXj&amp;id=ot7WxtZLc&amp;id=QxcRcsRKp&amp;id=iT7K3kPE8" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>20 Leo Platform npm packages backdoored in coordinated three-second burst, payload is a supply chain worm</h2>
<p>On June 24, an attacker published malicious versions of 20 npm packages from the Leo Platform ecosystem in under three seconds, using the same Phantom Gyp toolkit as the Miasma campaign from June 3. The payload uses a binding.gyp install hook, three-layer obfuscation (ROT-N, AES-128-GCM, <a href="http://obfuscator.io" target="_blank" rel="noopener nofollow">obfuscator.io</a>), and Bun runtime evasion to steal secrets from GitHub Actions runners, AWS/GCP/Azure credential stores, HashiCorp Vault, Kubernetes, and password managers. What makes this particularly nasty: it also functions as a worm, publishing malicious versions of any package the victim has publish rights to — bypassing 2FA in the process. The 20 packages collectively pull around 13,600 downloads per week. Rotate all credentials and remove the compromised versions immediately. <a href="https://daily.dev/posts/01l7qjYa4" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Linux Foundation launches Akrites with major industry backing to defend open source against AI-enabled threats</h2>
<p>Akrites establishes a shared Security Incident Response Team (SIRT) with a confidentiality-first coordinated vulnerability disclosure process, ensuring fixes flow back to upstream maintainers before public disclosure. The initiative will also serve as maintainer of last resort for critical packages with no active maintainer — a real gap given the CVE volume surge. The backdrop is stark: published CVEs across open source projects jumped 394% year-over-year according to the 2026 CRA Awareness Report, and frontier AI models can now surface vulnerabilities in open source projects in minutes. Alpha-Omega provides seed funding. Backers include AWS, Google, Microsoft, Anthropic, OpenAI, NVIDIA, and Red Hat. <a href="https://daily.dev/feed-by-ids?id=BcqD1k4gr&amp;id=NgUl9Nxo7&amp;id=C0colXIwS" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Ansible CVE-2026-11807 (CVSS 9.6): any authenticated user can retrieve plaintext credentials from EDA websocket API:</strong> Any authenticated user on Ansible Automation Platform 2.5 or 2.6 can hit the <code>/api/eda/ws/ansible-rulebook</code> endpoint, send a forged worker message, and pull plaintext SSH keys, vault passwords, and OAuth tokens — patch via RHSA-2026:28497 (AAP 2.5) or RHSA-2026:28492 (AAP 2.6) and rotate all credentials the platform held. <a href="https://daily.dev/posts/5W8MvMOXe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polymarket confirms $3M stolen via third-party frontend supply chain compromise, refunding affected users:</strong> Attackers compromised a third-party vendor to inject malicious code into Polymarket’s frontend, bridging roughly 1,893 ETH from Polygon to Ethereum — no core smart contracts were exploited, and Polymarket says it’s refunding all affected users in full. <a href="https://daily.dev/feed-by-ids?id=XjgAqQWD9&amp;id=t57t1dzOv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>npm rolling out 72-hour read-only lockdown for high-impact accounts on sensitive changes:</strong> When a high-impact npm account triggers an email change or 2FA recovery code use, the account enters a 72-hour read-only state with the previous email alerted — publishing, token management, and org changes are paused, directly blocking the credential-swap-then-publish supply chain attack pattern. <a href="https://daily.dev/posts/zkzBoiZhC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Packagist integrates Aikido Intel malware feed in Composer 2.10+, adds stable version immutability:</strong> Composer 2.10+ now blocks known malicious package versions by default using Aikido’s CC-BY licensed feed, and Packagist has introduced stable version immutability to prevent re-tagging attacks — Private Packagist can also enforce minimum Composer versions and refuse flagged packages to any client. <a href="https://daily.dev/posts/meRI1HnQN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>North Korean macOS malware ‘Gaslight’ embeds 38 fake error messages to confuse LLM-based triage agents:</strong> The 3.5 KB Rust payload injects fabricated crash reports, memory dumps, and SQL injection alerts formatted in Markdown to make AI analysis tools doubt their own session validity — SentinelOne attributes it to North Korea with high confidence but has not yet demonstrated a successful bypass of real platforms. <a href="https://daily.dev/posts/MElPTGrGZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


CVE disclosures, supply-chain attacks, security incidents, and developer-facing security tooling.

Security Digest

A security roundup covering multiple active threats: CVE-2026-20230, an unauthenticated SSRF in Cisco Unified CM's WebDialer, is being actively exploited via a three-stage chain dropping persistent webshells — patch to 14SU6 or Release 15 COP immediately. The Klue supply chain breach has escalated with a second extortion group demanding ransoms from victims including LastPass, HackerOne, and Huntress. Twenty Leo Platform npm packages were backdoored in a coordinated three-second burst using the Phantom Gyp toolkit, with a worm payload that propagates to any package the victim can publish to. The Linux Foundation launched Akrites, a coordinated SIRT backed by AWS, Google, Microsoft, Anthropic, and OpenAI, to handle vulnerability disclosure for critical open source packages amid a 394% year-over-year CVE surge. Also covered: a critical Ansible credential-exposure CVE, a $3M Polymarket frontend supply chain theft, npm's new 72-hour account lockdown, Packagist's malware feed integration, and North Korean macOS malware designed to confuse LLM-based triage tools.

Cisco Unified CM SSRF exploited in the wild, Klue breach spawns second extortion group