Novo Nordisk Breach Exposes Software Development Pipeline Risk
2026-06-18T20:51:46Z•2dea84dd9af6f010100df198d980333c554ab74b2f6fbf223c2cf8f5d0661e98
CISACheck-PointDoSFortinetGitHubHTTP/2IvantiSalesforceactive-exploitationcloud-securitycredential-harvestingdata-theftfileless-malwareidentitymalwaremobile-malwarepatchingransomwaresecrets-managementsupply-chainzero-day
What happened
A cluster of active, high-impact incidents and trends reported by DarkReading: secret/token leaks in software development pipelines (Novo Nordisk GitHub token) and supply-chain compromises (Miasma, PyPI 'Hades') highlight identity/secrets risks; multiple zero-days and quickly-exploited flaws (Ivanti Sentry, Check Point VPN, Oracle ERP, WinRAR CVE-2025-8088) are being weaponized in the wild; large-scale credential-harvesting campaigns have compromised tens of thousands of Fortinet devices; integrated SaaS app compromises (Klue → Salesforce) continue to drive data theft; advanced malware (file‑/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 2dea84dd9af6f010100df198d980333c554ab74b2f6fbf223c2cf8f5d0661e98
- Enrichment time
- 2026-06-18T20:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.