Cybersecurity Brief – 2026-07-12

Major Incidents or Breaches

The jscrambler npm package was compromised, with its 8.14.0 release containing a preinstall hook that executes a Rust-based infostealer on installation, exposing developers and users to credential theft and other risks ^[1].

Newly Discovered Vulnerabilities

Researchers identified a technique named ‘Ghostcommit’ that embeds prompt injection attacks within PNG images to bypass AI code reviewers and steal repository secrets, demonstrating a novel supply chain attack vector targeting AI-integrated development workflows ^[4].
Wireshark version 4.6.7 was released to address 12 security vulnerabilities and 16 additional bugs in the network protocol analysis tool ^[6].
An AI system uncovered a root-level vulnerability in the Linux kernel that had gone undetected for 15 years, highlighting a significant long-term risk in widely deployed operating systems ^[5].

Notable Threat Actor Activity

Multiple threat groups, suspected to be aligned with China and India, have engaged in sustained cyber espionage campaigns targeting Pakistani law enforcement agencies by weaponizing the Balochistan Police portal ^[2].
“Ghost accounts” are being used in mass reconnaissance campaigns to abuse the GitHub API, enabling threat actors to map organizations, repositories, and members at scale ^[7].

Trends, Tools, or Tactics of Interest

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign actively targeting vulnerable content management systems and associated plugins, indicating an ongoing trend in opportunistic mass exploitation of web platforms ^[3].