Know what changed.
Trace why it matters.

Attackers hijacked the .gh, .sl, and .as country-code top-level namespaces, altered authoritative DNS records, and obtained unauthorized HTTPS certificates for several Google and other organizations’ domains. Google said the attacks did not compromise its systems, and Chrome blocked suspected counterfeit certificates across the affected namespaces; Google said Chrome users were therefore protected.

With control of DNS routing and the unauthorized certificate’s private key, attackers could potentially intercept or modify user data sent to an impersonated site and use the trusted brand for malware or phishing.

The npm package “tensorlake,” a TypeScript SDK for Tensorlake applications, sandboxes, and cloud services, was compromised in a ChainDrop/Shai-Hulud supply-chain attack. Version 0.5.144 reportedly contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code.

Dependency intake warrants ownership across engineering and security rather than being treated solely as a developer convenience.

Black Lotus Labs reported that PoeLLM, malware targeting open-source AI services, had compromised more than 3,400 servers since April and formed an exploit-scanning and cryptocurrency-mining botnet. Researchers encountered PoeLLM infrastructure while investigating a maximum-severity defect affecting Ivanti’s Sentry secure mobile gateway; the botnet was linked to compromised LiteLLM, Ollama, Gotenberg and Gitea services and tools.

Changing the poem’s keywords lets the actor change the C2 location without updating the malware; Black Lotus Labs said many campaign C2s were not detected by crowd-sourced security tools.