FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infost…
Official intelligence summary
HAIJA INTEL REPORT
Generated 09/10/2026, 10:23. Pipeline: Europe/Belgrade. Regular sources favor exploit, blog, red-team, and attack-path content. CVE items only stay with exploit signal.
Total items9
Regular sources9
Tweets / X0
Threshold0.62
You can save this report in your browser with the favorite button. If you need a shared favorite list, use the CLI helper.
Tweets / X
0 itemsRegular sources
9 itemsOAuth grants pile up faster than you can review them. Here's how to keep up.
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent K…
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading i…
Fwd: Vulnerabilities in golang.org/x/net
Posted by Alan Coopersmith on Oct 08 -------- Forwarded Message -------- Subject: [security] Vulnerabilities in golang.org/x/net Date: Thu, 8 Oct 2026 18:09:23 +0000 Fro…
Fwd: Go 1.27.2 and Go 1.26.9 are released
Posted by Alan Coopersmith on Oct 08 -------- Forwarded Message -------- https://go.dev/doc/security/policy>: * net/http: HTTP/2 server...
OpenJPEG: heap-buffer-overflow write fixed on master since Feb 2026, still present in every release (2.5.3, 2.5.4)
Posted by TheSecguy on Oct 08 Hello, Short version: OpenJPEG has had a heap-buffer-overflow WRITE fixed on master since 2026-02-10 that has never appeared in a release. …
tor-0.4.9.14 released
Posted by Sam James on Oct 07 """ @@ -1,3 +1,136 @@ +Changes in version 0.4.9.14 - 2026-10-07 + Another week, another security release. This again contains major bugfixe…
[OSSN-0109] Cross-project metric association bypass in Gnocchi
Posted by Goutham Pacha Ravi on Oct 07 ========================================================================== OSSN-0109: Cross-project metric association bypass in G…
Satel Netco Design
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system res…