<p><strong>TLDR:</strong> The Miasma credential-stealing worm framework briefly leaked on GitHub, and security researchers expect more advanced variants to follow — the same pattern that turned Shai-Hulud into Miasma in the first place. Ivanti Sentry has two critical CVEs (10.0 and 9.9) with a public PoC now available, making exploitation likely imminent. npm v12’s install script blocking is confirmed for July, closing a supply chain vector that Yarn, pnpm, and Bun blocked years ago. Researcher Nightmare Eclipse dropped a seventh Windows zero-day (RoguePlanet) hours after Patch Tuesday, with five of their seven disclosures still unpatched.</p>
<hr>
<h2>Miasma worm source code leaked on GitHub via compromised developer accounts</h2>
<p>Miasma, the credential-stealing worm behind attacks on 73 Microsoft GitHub repos and 42 @tanstack npm packages, was deliberately leaked on GitHub through compromised developer accounts. It needs no C2 infrastructure — GitHub itself handles command-and-control — and harvests credentials from cloud providers, CI/CD systems, Kubernetes, and password managers before trojaning npm, PyPI, and RubyGems packages. The nastier features: a dead-man switch that recursively deletes files if a stolen GitHub token is revoked, a five-stage build pipeline generating unique encrypted payloads per build, and the ability to poison AI coding tool configs for Claude, Cursor, Copilot, Kiro, and Cline. The deliberate leak is expected to spawn more capable variants, exactly as Shai-Hulud’s leak produced Miasma. <a href="https://app.daily.dev/feed-by-ids?id=dDDTND772&amp;id=KLWp4mgLa&amp;id=ydFAsLRc8" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Ivanti Sentry CVE-2026-10520 and CVE-2026-10523: public PoC available, patch immediately</h2>
<p>Two critical Ivanti Sentry vulnerabilities are now public with a working proof-of-concept from watchTowr. CVE-2026-10520 (CVSS 10.0) is a pre-auth OS command injection giving unauthenticated root RCE via a POST to an exposed endpoint. CVE-2026-10523 (CVSS 9.9) is an authentication bypass that lets anyone create arbitrary admin accounts. No active exploitation confirmed yet, but given Ivanti’s history as a ransomware target and the public PoC, treat this as urgent outside normal patch cycles. Fixed in Sentry versions 10.5.2, 10.6.2, and 10.7.1. <a href="https://app.daily.dev/feed-by-ids?id=UuWuTwN8P&amp;id=uxVWLKGex&amp;id=F3UlVLXlq&amp;id=H8HIXzueL" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>Researcher drops RoguePlanet zero-day hours after Patch Tuesday, five disclosures still unpatched</h2>
<p>Nightmare Eclipse published RoguePlanet — a TOCTOU race condition in Windows Defender that grants SYSTEM privileges on fully patched Windows 10 and 11 — hours after Microsoft’s record June Patch Tuesday. ThreatLocker confirmed the exploit works. Microsoft has removed the researcher’s GitHub and MSRC accounts and previously threatened criminal prosecution; the researcher re-hosted on a new repo called MSNightmare. Five of their seven disclosed zero-days remain unpatched, and the June patch cycle also addressed three earlier Eclipse disclosures: GreenPlasma (CVE-2026-45586), MiniPlasma (CVE-2020-17103), and YellowKey (CVE-2026-45585, a BitLocker bypass requiring physical access). <a href="https://app.daily.dev/feed-by-ids?id=l1aUcgX7d&amp;id=3qmKX9mgs&amp;id=kdHRbZecb" target="_blank" rel="noopener nofollow">Read more</a></p>
<h2>npm v12 blocks install scripts by default, confirmed for July</h2>
<p>npm v12 will block automatic execution of preinstall, install, and postinstall scripts from dependencies unless explicitly approved — closing a supply chain attack vector that Yarn, pnpm, and Bun blocked years ago. The delay came down to ecosystem compatibility: native modules, Playwright, Cypress, Electron, and Husky all rely on install scripts, and bad defaults became entrenched infrastructure. The new opt-in model creates an auditable allowlist of packages permitted to execute code, which matters for regulated environments. Teams can run npm 11.16.0 now to surface warnings before the breaking change lands. <a href="https://app.daily.dev/feed-by-ids?id=Lq84IIDjT&amp;id=utLKR6LO8&amp;id=Z94coFuNL" target="_blank" rel="noopener nofollow">Read more</a></p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Langflow CVE-2026-5027: path traversal under active exploitation, ~7,000 exposed instances:</strong> An unauthenticated path traversal in Langflow’s POST /api/v2/files endpoint (CVE-2026-5027) allows arbitrary file writes with no credentials required because Langflow enables unauthenticated auto-login by default; VulnCheck honeypots confirm active exploitation, Censys shows roughly 7,000 public instances, and the fix is in Langflow 1.10.0. <a href="https://app.daily.dev/posts/sPTeyrCl6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Erlang/OTP patches CVE-2026-49759 RCE across versions 27, 28, and 29:</strong> OTP 27.3.4.13, 28.5.0.2, and 29.0.2 all patch CVE-2026-49759, a buffer overflow in SCTP parsing in erts that can lead to remote code execution, alongside five other CVEs covering SSRF, credential leakage on HTTP redirects, SSH path disclosure, and a TLS distribution bypass. <a href="https://app.daily.dev/feed-by-ids?id=7EjosHwnG&amp;id=x9oxTBvU6&amp;id=fR7WkIQYl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ShinyHunters claims Oracle PeopleSoft breach at 100+ organizations, mostly universities:</strong> ShinyHunters claims to have hit over 300 PeopleSoft instances across 100+ organizations using a chain of old and zero-day vulnerabilities, with stolen data including student records, financial aid, immigration, and health data; IOC IPs are published and Oracle has not responded. <a href="https://app.daily.dev/feed-by-ids?id=pJB82LsrQ&amp;id=AZQdbOUf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel CVE-2026-23111: unprivileged local root via single misplaced ‘!’ in nf_tables, public exploit available:</strong> A use-after-free in nf_tables caused by an inverted condition check lets any unprivileged local user gain root and escape containers on Debian Bookworm/Trixie, Ubuntu 22.04/24.04, and RHEL 10; a public exploit from FuzzingLabs has been available since April, with mitigation via sysctl user.max_user_namespaces=0 if patching isn’t immediately possible. <a href="https://app.daily.dev/posts/yGw6q0Dsw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust crate ‘onering’ v1.4.1 exfiltrates source code diffs disguised as Sentry telemetry:</strong> The onering crate’s <a href="http://build.rs" target="_blank" rel="noopener nofollow">build.rs</a> script runs git diff HEAD^ HEAD at build time and POSTs the output to an attacker-controlled Sentry ingest endpoint — no function calls needed, triggers automatically on build — with both the <a href="http://crates.io" target="_blank" rel="noopener nofollow">crates.io</a> package and maintainer GitHub repo confirmed compromised. <a href="https://app.daily.dev/posts/OBeHBcYEx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>


CVE disclosures, supply-chain attacks, security incidents, and developer-facing security tooling.

Security Digest

A security roundup covering several high-severity incidents: the Miasma credential-stealing worm framework leaked on GitHub, spawning fears of more capable variants; Ivanti Sentry has two critical CVEs (CVSS 10.0 and 9.9) with a public PoC enabling unauthenticated RCE and admin account creation; researcher Nightmare Eclipse dropped a seventh Windows zero-day (RoguePlanet) targeting Windows Defender hours after Patch Tuesday, with five disclosures still unpatched; and npm v12 will block install scripts by default in July, closing a long-standing supply chain vector. Notable items include active exploitation of a Langflow path traversal, Erlang/OTP RCE patches, a ShinyHunters Oracle PeopleSoft breach claim, a Linux kernel local root exploit, and a malicious Rust crate exfiltrating source code diffs.

Miasma worm source code leaks, Ivanti Sentry PoC goes public