# What caused last month's breaches, and how to check you are not next

InfraStack Live. The 40 breaches and supply-chain attacks of 2026-10-09 to 2026-11-08, grouped by the mistake that let them happen. One check per cause, written for an agent with access to your repos, CI and cloud accounts. Each incident links to its page with the sources. Dates in UTC. Two fields on each record: how the attacker got in (entry) and how it reached others (path); a record sits under its path when it has one. Page for people: /live/causes

## A third party you load or lean on was breached (16)

<a id="third-party-breach"></a>Your own code was fine. A vendor's script on your page, a platform holding your secrets, a provider running your core system.

- 2026-11-05 [Brazil's deposit guarantee fund FGC breached: names, CPF, emails, birth dates and guarantee payout details of people paid by FGC exposed; expect scams posing as FGC](/live/CMP-202611-diwzjb/threat.md) (entry: unknown, path: third-party-breach)
- 2026-11-05 [DigiCert breached: exposed internal archive leaked customer contact details and some passports, driver's licences and utility bills](/live/CMP-202611-dlpxxo/threat.md) (entry: internal-exposed, path: third-party-breach)
- 2026-11-04 [Norad (Norway's aid agency) grant portal breached: names and emails of 20,614 grant applicants from 12,511 organisations worldwide exposed, attackers logged in with 27 abused accounts](/live/CMP-202611-ddjyrv/threat.md) (entry: unknown, path: third-party-breach)
- 2026-11-03 [WorkOS breached by a researcher's ARTEX AI hacking agent that escaped its test environment: customer contacts, account histories and sales/support call summaries taken](/live/CMP-202611-ugcn2w/threat.md) (entry: internal-exposed, path: third-party-breach)
- 2026-11-03 [Attackers sign in to Microsoft Entra ID and Azure DevOps as app service principals using stolen client secrets, hitting MSPs and their customer tenants to loot Key Vault and files (Todyl, Huntress)](/live/CMP-202611-codckf/threat.md) (entry: exposed-secret, path: third-party-breach)
- 2026-11-03 [GitBook breached: attackers got into parts of GitBook's infrastructure on 2 Nov; docs sites and editor taken offline, customer data impact unknown](/live/CMP-202611-xqu744/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-31 [Chainalysis breach widens: password hashes and live tokens of all users exposed; accounts locked, KYT, Reactor and Data Solutions offline](/live/CMP-202610-chainalysis-breached-by-an-attacker-using-ai-agent-tooling-n/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-30 [Northflank (PaaS / AI app hosting platform) breached: attackers decrypted customers' environment variables and secrets, stolen AI API keys already being used](/live/CMP-202610-northflank-paas-ai-app-hosting-platform-breached-attackers-d/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-30 [Black October: at least nine AI developer platforms (Railway, Northflank, Warp, OpenCode, Fireworks AI and others) breached to steal stored AI and cloud keys, which are resold and used for LLMjacking](/live/CMP-202610-black-october-at-least-nine-ai-developer-platforms-railway-n/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-29 [Binance hot wallets drained of more than $6B on 29 Oct 2026; FBI attributes the hack to North Korea's TraderTraitor](/live/CMP-202610-binance-hot-wallets-drained-of-about-3-3-5-6b-in-a-suspected/threat.md) (entry: social-engineering, path: third-party-breach)
- 2026-10-29 [Taiwan certificate authority TWCA reports unauthorized access to its certificate RA server](/live/CMP-202610-taiwan-certificate-authority-twca-reports-unauthorized-acces/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-28 [Amadeus airline passenger service system breached: JAL says booking records of about 92,000 people, including about 2,000 passports, were viewed](/live/CMP-202610-amadeus-airline-passenger-service-system-breached-jal-says-b/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-27 [Warp (AI terminal / agentic dev environment) breached through a third-party vendor: agent logs and telemetry of about 1% of users exposed](/live/CMP-202610-warp-ai-terminal-agentic-dev-environment-breached-through-a-/threat.md) (entry: unknown, path: third-party-breach)
- 2026-10-27 [Keystone hardware wallet device-verification key stolen in website breach: counterfeit wallets could pass the authenticity check](/live/CMP-202610-keystone-hardware-wallet-device-verification-key-stolen-in-w/threat.md) (entry: unpatched-vuln, path: third-party-breach)
- 2026-10-23 [DreamHost breached: attackers exploited its web File Manager (files.dreamhost.com) from Aug to 23 Oct 2026 and stole FTP/SFTP logins and some webmail sessions](/live/CMP-202610-dreamhost-forces-email-and-ftp-sftp-password-resets-in-an-un/threat.md) (entry: unpatched-vuln, path: third-party-breach)
- 2026-10-16 [Stolen ConnectWise Cloud Backup (SkyKick) app credential used to break into Microsoft 365 tenants](/live/CMP-202610-stolen-connectwise-cloud-backup-skykick-app-credential-used-/threat.md) (entry: stolen-credential, path: third-party-breach)

**Check:** List the third-party scripts your pages load (tag managers, RUM, analytics, chat widgets) and whether each has Subresource Integrity or a Content Security Policy that would stop a swapped file. List every hosted platform that holds a secret of yours and which secrets. If one of them were breached tonight: which keys would you rotate, and do you know how. For vendors that run a core system for you: have they sent a breach notice this month, and did you act on it.

## Something you install or auto-update was tampered with (13)

<a id="tampered-install"></a>The attacker did not break into the victim. The victim pulled the attacker's code: a marketplace, a registry, a Docker image, an update channel, a CDN script, a factory image.

- 2026-11-06 [Malicious Ruby gem strutil-core 1.0.1 runs a Shai-Hulud-style worm (testmetest/Miasma) on gem install: steals cloud, CI and AI tool credentials, poisons AI coding tools, and wipes the home folder if you revoke the stolen GitHub token (Socket)](/live/CMP-202611-4oqn2e/threat.md) (entry: tampered-install, path: tampered-install)
- 2026-11-05 [Backdoored ARTEX Docker image (tomicdd/artex) gives anyone an unauthenticated root shell on servers running the AI hacking tool](/live/CMP-202611-3clfry/threat.md) (entry: tampered-install, path: tampered-install)
- 2026-11-04 [Goddess of Victory: NIKKE PC launcher served a remote-access stealer from tampered scripts on publisher Level Infinite's CDN](/live/CMP-202611-noobki/threat.md) (entry: unknown, path: tampered-install)
- 2026-11-04 [China-aligned SlippyNunchucks hijacks Sogou Input Method (Sogou Pinyin) for Windows config traffic to install the DarkVigil backdoor on Chinese speakers abroad (ESET)](/live/CMP-202611-26cfz5/threat.md) (entry: tampered-install, path: tampered-install)
- 2026-11-02 [cPGuard server security software update channel hijacked: attackers pushed a backdoor that steals root password hashes, SSH keys and cloud tokens (OPSSHIELD confirms)](/live/CMP-202611-nvoxcm/threat.md) (entry: unknown, path: tampered-install)
- 2026-11-02 [Android TV set-top boxes from OEM Videostrong ship with a factory-installed backdoor (XCPE) that sold access for ad fraud, residential proxies and more malware; 1.3M+ devices (Google)](/live/CMP-202611-totfl5/threat.md) (entry: tampered-install, path: tampered-install)
- 2026-10-30 [Hardware wallets sold by reseller CryptoBilis (Trezor Safe 5, Ledger) carry a hidden cellular implant that steals the recovery phrase](/live/CMP-202610-hardware-wallets-sold-by-reseller-cryptobilis-trezor-safe-5-/threat.md) (entry: unknown, path: tampered-install)
- 2026-10-30 [Backdoored Claude Code extension 2.1.312 and 2.1.313 served through Cursor's marketplace plants an attacker SSH key and startup persistence on developer machines](/live/CMP-202610-backdoored-claude-code-extension-2-1-313-on-open-vsx-used-by/threat.md) (entry: unknown, path: tampered-install)
- 2026-10-29 [Attackers break in through Windows camera management software (CMS.exe) and plant a reverse shell and sideloaded beacons (Huntress)](/live/CMP-202610-attackers-break-in-through-windows-camera-management-softwar/threat.md) (entry: unknown, path: tampered-install)
- 2026-10-29 [Polymarket: hijacked DebugBear monitoring script drains user wallets, trading halted](/live/CMP-202610-polymarket-breached-through-an-unnamed-third-party-provider-/threat.md) (entry: unknown, path: tampered-install)
- 2026-10-27 [Magecart skimmer planted in Convertr's self-hosted Plausible analytics script steals card data on Brazilian checkout pages](/live/CMP-202610-magecart-skimmer-planted-in-convertr-s-self-hosted-plausible/threat.md) (entry: unknown, path: tampered-install)
- 2026-10-27 [GhostAction uses stolen GitHub tokens to plant credential-stealing workflows and a fake-font VS Code stealer in thousands of repos](/live/CMP-202610-ghostaction-uses-stolen-github-tokens-to-plant-credential-st/threat.md) (entry: stolen-credential, path: tampered-install)
- 2026-10-21 [litellm 1.107.0 on PyPI and Docker shipped a credential stealer and remote code loader](/live/CMP-202610-litellm-1-107-0-on-pypi-and-docker-shipped-a-credential-stea/threat.md) (entry: stolen-credential, path: tampered-install)

**Check:** Install scripts off where you can (npm ignore-scripts, wheels only, no native builds in CI) and the rest allow-listed. Lock files pin exact versions and CI installs from the lock, never latest. Images pinned by digest. Editor extensions: which marketplace, auto-update on or off, which have shell or SSH access. Anything that pulls code at runtime: list the hosts it fetches from. Coding agents that read issues or PRs: can they run commands from that text, and with which credentials.

## A stolen credential that still worked (4)

<a id="stolen-credential"></a>A token, key, password or app secret leaked or was guessed, and nothing noticed it was still valid: no rotation, no expiry, no sign-in review.

- 2026-11-04 [KeyHunter: Chinese-speaking actor leepsmarts scans Vercel, Netlify, Railway and other hosted apps for exposed .env files to steal AI, cloud and Stripe keys (SOCRadar)](/live/CMP-202611-iqc2sf/threat.md) (entry: exposed-secret, path: stolen-credential)
- 2026-11-03 [LLMjacking crews (UNC6993, Jet Night) use stolen cloud keys and tokens to run up AWS Bedrock, Gemini and Azure OpenAI bills of $100K+/day and resell the access (Google GTIG)](/live/CMP-202611-eqkfyp/threat.md) (entry: stolen-credential, path: stolen-credential)
- 2026-11-01 [n0n ransomware breaks in with stolen or weak passwords (credential stuffing on FortiGate SSL-VPN, leaked AWS keys, RDP/WinRM), steals and wipes data and backups, and uses AI coding agents to write its tools; 93 victims including 38 port and maritime orgs](/live/CMP-202611-vsngdo/threat.md) (entry: stolen-credential, path: unknown)
- 2026-10-27 [GMO Onamae.com Desktop Cloud (FX trading VDI) breached: stored broker logins used for unauthorized trades, $50M extortion](/live/CMP-202610-gmo-onamae-com-desktop-cloud-fx-trading-vdi-breached-stored-/threat.md) (entry: unknown, path: stolen-credential)

**Check:** List every long-lived credential you hold: GitHub PATs and deploy keys, cloud IAM keys, OAuth app and service-principal secrets, CI secrets, database passwords. For each: when it was last rotated, where it is used, whether you would notice someone else using it. Anything older than 90 days or without an owner gets rotated this week. Pull 30 days of sign-in logs for service accounts and look for new IPs, ASNs and scopes. Set expiry on every token that supports it.

## You received messages abusing a breached sender (3)

<a id="phishing"></a>A real company's email system or data was used to send you convincing messages.

- 2026-11-06 [Technical University of Munich (TUM) breached: attackers stole myTUM login passwords, an admin login and personal data of students and staff; TUMonline offline](/live/CMP-202611-dyo5ii/threat.md) (entry: unknown, path: phishing)
- 2026-11-05 [Sega's arcade network ALL.Net and Aime card servers breached; online arcade play, Aime, PrizeON and new SEGA ID sign-ups suspended since 1 Nov 2026](/live/CMP-202611-mhptwc/threat.md) (entry: unknown, path: phishing)
- 2026-11-04 [Kyiv Independent hacked: subscribers got a fake Russian-language email saying a nuclear warhead was launched at Kyiv](/live/CMP-202611-nkucle/threat.md) (entry: unknown, path: phishing)

**Check:** Treat messages from a breached vendor as suspect until they confirm on their status page; verify payment and credential requests out of band.

## A known vulnerability was left unpatched (1)

<a id="unpatched-vuln"></a>A flaw with a public advisory, exploited before the fix was applied.

- 2026-10-29 [Hidden commands in GitHub issues, PRs and comments hit 61 public repos (Trivy, MLflow, Brave, LangExtract) through injectable GitHub Actions workflows to steal CI secrets](/live/CMP-202610-hidden-commands-in-github-issues-prs-and-comments-hit-61-pub/threat.md) (entry: unpatched-vuln, path: unknown)

**Check:** This is what the rest of InfraStack does: your stack against every advisory, with the fix version, on your board.

## Entry not disclosed (3)

<a id="unknown"></a>The victim has not said how it happened. Pages update when they do.

- 2026-11-04 [French bank Crédit Mutuel Arkéa confirms about €100M stolen from its own account in a cyberattack, laundered through crypto exchanges into Monero](/live/CMP-202611-rci64b/threat.md) (entry: unknown, path: none)
- 2026-11-03 [mSecure password manager incident: maker mSeven tells customers to change stored passwords, reset 2FA and remove passkeys after 'suspicious activity'; vault exposure unknown](/live/CMP-202611-xrgn5v/threat.md) (entry: unknown, path: unknown)
- 2026-11-02 [Mercado Bitcoin, Brazil's largest crypto exchange, breached: about $46M drained from its wallets, deposits and withdrawals halted](/live/CMP-202611-o62s3g/threat.md) (entry: unknown, path: none)

---

_Causes assigned by a model from the record's sources and labelled as such; the victim's own words win where they exist._