Yahoo<i>!</i> Japan’s owner consolidating 164 OpenStack clusters into one
2026-04-07T07:24:13Z•1bac12713d0b9027066518dee8f15c025116bf3986df58a43adbbc35cb19cd16
CUPSRCEaxioscitrix-netscalerclaude-code-leakdns-exfiltrationexploitedforticlientfortinetghostsocksiran-linked-activity","data-breachlitellmnpmopenaipassword-sprayingpypiratrootsocial-engineeringsupply-chaintrivytrojanized-downloadsvidarwhatsappzero-day
What happened
Feed of infosec headlines: multiple high-impact supply-chain and in-the-wild exploitation incidents dominate the cycle. Fortinet issued an emergency patch for a FortiClient EMS critical bug confirmed exploited in the wild and added to CISA’s KEV. Researchers (and AI agents) disclosed CUPS vulnerabilities that can be chained to unauthenticated RCE and root file overwrite. Supply‑chain compromises continue: an npm axios backdoor dropped a cross‑platform RAT, the Trivy/LiteLLM incident has propagated to PyPI (Telnyx) and downstream victims (eg. Mercor), and tens of thousands who downloaded leaked
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- 1bac12713d0b9027066518dee8f15c025116bf3986df58a43adbbc35cb19cd16
- Enrichment time
- 2026-04-07T07:24:13Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.