Microsoft links Mastra AI supply chain attack to North Korean hackers

Published on June 20, 2026

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. [...]

Continue reading on website
Other news

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

June 20, 2026
Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites.The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers to extract sensitive data, such as configuration data, API keys, secrets, and OAuth tokens

New Prinz Eugen ransomware prioritizes recent files for encryption

June 20, 2026
A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption and leaves no ransom note on the system. [...]