Karma-X News

Cybersecurity intelligence — emerging threats, vulnerability research, and threat actor tracking.
RSS Feed Atom Feed
Axios npm Package Compromised: Supply Chain Attack via Phantom Dependency Drops Cross-Platform RAT
Axios npm Package Compromised: Supply Chain Attack via Phantom Dependency Drops Cross-Platform RAT
RAT Axios npm Supply Chain Attack Dependency Injection JavaScript Mar 31, 2026

Axios npm package compromised—attackers hijacked the maintainer’s account and injected a phantom dependency that dropped a cross-platform RAT. Here’s the full attack chain.

Read full analysis →
OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability
OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability
AI Security OpenAI ChatGPT Codex DNS Exfiltration Command Injection Mar 30, 2026

Check Point found ChatGPT’s code sandbox could leak data via DNS. Separately, Codex’s branch name field allowed command injection to steal GitHub tokens.

Read full analysis →
Russian CTRL Toolkit: How Malicious LNK Files Enable RDP Hijacking via Reverse Tunnels
Russian CTRL Toolkit: How Malicious LNK Files Enable RDP Hijacking via Reverse Tunnels
Threat Intelligence CTRL Toolkit LNK Exploitation RDP Hijacking FRP Tunnels Russian APT Mar 30, 2026

A custom .NET RAT dubbed CTRL uses weaponized Windows shortcuts to hijack RDP sessions via FRP tunnels—here’s the full attack chain and how to defend against it.

Read full analysis →
Red Menshen’s Upgraded BPFdoor: How China’s Stealthiest Backdoor Infiltrates Global Telecom Networks
Red Menshen’s Upgraded BPFdoor: How China’s Stealthiest Backdoor Infiltrates Global Telecom Networks
BPFdoor Red Menshen APT Telecom Espionage Linux Kernel Threat Intelligence Mar 29, 2026

Red Menshen’s upgraded BPFdoor backdoor embeds kernel-level sleeper cells in telecom networks worldwide. Here’s how it works and how to detect it.

Read full analysis →
Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
Malware RAT MSS Southeast Asia Windows 10 Mar 28, 2026

Uncover the decade‑long MSS‑backed campaign targeting Southeast Asian critical infrastructure—USBFect, Bronze Mohawk, and more.

Read full analysis →
CRITICAL: Telegram Vulnerability “ZDI‑CAN‑30207” Exposes Users to Zero‑Click Attacks
CRITICAL: Telegram Vulnerability “ZDI‑CAN‑30207” Exposes Users to Zero‑Click Attacks
RCE Vulnerability Telegram Zero‑Click Mobile Desktop Mar 27, 2026

Telegram zero‑click RCE flaw (ZDI‑CAN‑30207) exposes users to full system compromise—update now or disable media auto‑download.

Read full analysis →

Page 2 of 4 • 21 articles