Security & Trust

431 wallets, five blockchains, one root cause: recovery phrases generated from a keyspace small enough to brute-force.

Ubiquiti's July 8 advisory patches seven critical and eighteen high-severity UniFi OS vulnerabilities — against a backdrop of 100,000 previously indexed internet-facing instances.

A suspected China-aligned campaign chained an XSS flaw patched in August 2024 with an RCE patched in mid-2025 to compromise physics and engineering departments at U.S. and Canadian universities. The gap is not disclosure — it is deployment.

Two critical authentication bypasses in BeyondTrust RS and PRA join a cPanel/WHM KEV entry from the same month — both granting privileged infrastructure control via a web-accessible login.

Langflow, a visual builder for AI agents, joins CISA's KEV catalog after attackers used a broken authorization flaw to harvest LLM credentials and hijack compute.

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

A CVSS 9.8 authentication bypass in Gitea Docker images was under active probing within 13 days of disclosure. The flaw requires a non-default configuration — but the Docker image ships with that configuration enabled.

A maximum-severity, actively exploited ColdFusion flaw triggered the harshest tier of CISA's new standing directive — on a platform most monitoring tools never see coming.

Mandiant recovered active ADFS token-signing keys from Machine DPAPI without touching LSASS or the live service process. The forged SAML token granted Global Administrator access to a federated Microsoft 365 tenant. MFA, Conditional Access, and all identity controls were bypassed.

NetNut enrolled smart TVs and streaming boxes into a residential proxy network via pre-installed SDKs. 316 distinct threat clusters used it in a single week. Google disabled the C2 infrastructure. The supply chain was the infection vector.

A new cross-platform infostealer deployed through a SimpleHelp authentication bypass explicitly targets AI development assistant tokens, cloud platform credentials, and package registry keys. The attack surface is not the code — it is the developer.

CVE-2026-50548 and CVE-2026-50549 — dubbed DuneSlide — let a prompt injection escape Cursor's sandbox and execute arbitrary commands with developer privileges. More than half the Fortune 500 use Cursor. Every version before 3.0 was vulnerable.

Anthropic's Claude Code has accumulated 28 CVEs in its first year, including two CVSS 10.0 critical sandbox escapes. CVE-2026-46406, the latest, let any local user read secrets from a predictable temp file path. When the security tool becomes the attack surface, every assumption changes.

Frameworks with zero or near-zero critical CVEs hold 3.5% of the Tranco top 10K — and all of them are growing. Hugo, Astro, and HTMX share a trait: minimal attack surface by design.

Google Threat Intelligence Group documents a modular .NET implant that Turla has been developing since 2022 — one more tool in an apparatus that has compromised victims across 50+ countries.

ORAS Go and Java SDKs — used by Azure ACR, AWS ECR, Docker Hub, Helm, and Notation — disclosed symlink and hardlink escape flaws that let a malicious artifact write files outside the extraction directory.

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool used by developers and red teamers.

A container isolation flaw in a serverless platform reveals what infrastructure sits beneath AI agent workloads.

A Mandiant breach response finds ViewState deserialization actively exploited in enterprise learning systems.

In gonic's Subsonic API, any authenticated user can read or delete any other user's data — BOLA confirmed as API risk #1

Framework intelligence covers one layer. The management plane beneath your stack is an untracked second variable.

GHSA-cjhr-43r9-cfmw catalogs how repository .npmrc redirects developer credentials to attacker-controlled registries.

A self-hosted music server flaw illustrates the gap between web perimeter scores and host-level risk

GHSA-gj8w-mvpf-x27x: Repository-level settings can redirect pnpm to a native install engine without contributor awareness

GHSA-w466-c33r-3gjp: a crafted lockfile can redirect which pnpm binary runs before a dependency is installed

A config-phase flaw expands environment secrets into registry requests — before any lifecycle script runs

Techniques that rebuilt GameCube games from binary are now trained on the web's encrypted plugin ecosystem

CVE-2026-12415: wp_ajax_nopriv_pravel_invoice_edit_account requires no capability check. Any unauthenticated request escalates to administrator. Plugin Roulette claims another round.

CVE-2026-48930: embedded nul-bytes in hostnames cause silent authority rebinding via C-string truncation. Node.js 22, 24, and 26 affected. The severity dispute exposes a scoring system failure.

CVE-2026-53519 (CVSS 9.1) leaks jwt_secret_key via path traversal. A second flaw (CVSS 9.9) lets any authenticated user hijack another's live terminal. 10K-star self-hosted monitoring platform.

GHSA-hmgp-w9jm-vp95 shows how authenticated-not-authorized gaps become systemic when machine clients hold the credentials

The createPlaylist endpoint in gonic accepts unconstrained file paths. Authentication gates the door; nothing gates the filesystem behind it.

Authentication passed. Authorization was absent. How a gonic Subsonic API flaw illustrates the gap AI agents exploit at scale.

semantic-router pulled a compromised wheel via its AI dependency chain. A .pth file executed on Python startup — no import needed — exfiltrating AWS, GCP, Azure creds, SSH keys, and Kubernetes configs.

Path traversal, manifest spoofing, hoisted alias escapes, arbitrary deletion — 8 distinct vulnerabilities in the package manager that Next.js, Nuxt, and Astro depend on. The supply chain attack surface just moved from packages to package managers.

A ${tag} placeholder in Fluentd's output path enables arbitrary file write on the host. The CNCF-graduated log collector running in millions of Kubernetes pods is the vulnerability.

CVE-2026-50548 and CVE-2026-50549: working directory manipulation and symlink canonicalization bypass in Cursor pre-3.0. The AI coding tool that developers trust with filesystem access had no real sandbox.

Sapphire Sleet compromised 141 packages in the @mastra npm scope — a TypeScript framework for building AI agents and RAG pipelines. Any CI/CD pipeline running npm install was owned. The supply chain target has shifted from legacy CMS to AI tooling.

Attackers compromised Klue's Salesforce integration using a legacy credential, harvested OAuth tokens, and exfiltrated data from HackerOne, Snyk, Huntress, Recorded Future, BeyondTrust, and LastPass in 15 minutes.

CVE-2026-55165 exposes a textbook auth bypass in a Flask-based certificate manager trusted by enterprises

CVE-2026-48713 and CVE-2026-48714 hit the npm ecosystem's dominant internationalisation library. Both scored CVSS 9.1. The second vulnerability bypassed the fix for the first using dotted __proto__ variants. Every Next.js, React, Angular, and Vue app using i18next was exposed.

CVE-2026-4020 in Gravity SMTP exposes a REST endpoint that dumps 365KB of live credentials — Amazon SES, Google, Mailjet, Zoho OAuth tokens. Patched in March. Mass exploitation started in June. 17M+ attempts blocked.

CVE-2026-46595 bypasses public key authentication entirely. CVE-2026-39831 defeats hardware security keys without physical touch. Go was supposed to be the memory-safe alternative. Its cryptographic foundation just cracked in ten places at once.

A Russian-speaking broker brute-forced 430,000 FortiGate devices. 86,644 fell. Custom sniffers harvested 110M+ credentials passing through compromised firewalls — including Chevron, Samsung, AT&T, Mercedes-Benz.

Novee Security scanned 30,000 high-impact repositories and found 300+ fully exploitable CI/CD pipelines — including Azure Sentinel, Google AI Agent Dev Kit, and Cloudflare Workers SDK. Any free GitHub account could forge approvals, push code, or steal credentials.

CVE-2026-20245 gives attackers root access via a crafted file upload. CVE-2026-20262 was exploited for months before patching. Mandiant traced one chain to a malicious CSV that opened a root shell. Seven zero-days in six months is not a vulnerability trend — it is an architectural failure.

Akamai's 2026 study of 1,840 security leaders reveals that only 23% know which APIs return sensitive data — down from 40% in 2022. Organisations are spending more on API security and understanding less. AI is accelerating the gap.

EPSS — the model that predicts which vulnerabilities will actually be exploited — gives WordPress's worst CVE a 0.98 out of 1.0. Drupal is at 0.85. Magento at 0.97. The frameworks powering 80% of the web are also the most likely to be attacked.

CVE-2026-34908, 34909, 34910: access control bypass, path traversal, and command injection in UniFi OS. All CVSS 9.5. Active exploitation confirmed. CISA deadline: June 26.

34 packages across npm, PyPI, and Crates.io hide zero-width Unicode instructions in .cursorrules and CLAUDE.md files. When Cursor or Claude Code opens the project, the AI runs a fake security scan that exfiltrates your secrets.

June 24-25: Rocket.Chat (4 auth bypasses), Cacti (4 unauthenticated SQLi), Gogs (CVSS 10.0 RCE), Chrome (2 sandbox escapes). None had patches at disclosure time. 76% spike from the prior period.

The Shai-Hulud, Miasma, and Hades campaigns have backdoored over 100 packages since June 1. None have CVE identifiers. No scanner catches what the system does not track.

Attackers infiltrated ShapedPlugin's release process, injecting credential-stealing malware into Pro plugin updates distributed through official channels. CVE-2026-10735, CVSS 9.8.

Google's own AI coding tool had a maximum-severity command injection flaw. In --yolo mode — commonly used in CI/CD — all tool allowlists were ignored. A malicious GitHub issue became an RCE.

WordPress, Django, and Drupal publish no GitHub releases. Next.js, Angular, and Laravel ship 50 per year. The difference determines how fast your team can patch.

Spring has only 46 total CVEs. Django has 294. Laravel has 218. But 54% of Spring's vulnerabilities are high or critical severity, its average CVSS is 6.82, and its security score just dropped 13.6 points in two months. Fewer CVEs does not mean safer.

Adobe pours more engineering hours into Magento than Google pours into Angular. The vulnerability count keeps climbing anyway.

Flask core is stable and patched. But nobody runs bare Flask. The real risk lives in the 10–20 community extensions every production app depends on — and no dashboard is watching them.

All five Five Eyes intelligence agencies issued a joint warning on June 23: frontier AI models will transform offensive cyber capabilities on a timeline of months, not years. Their first recommendation? Isolate or remove legacy systems.

FortiNet, Palo Alto, Check Point: three vendors, three vectors, one structural conclusion in June 2026.

Go-based ransomware prioritizes recent files, drops no ransom note, uses RMM tools. Five victims incl. Standard Bank.

TOTP brute-force compromised ~20 Dashlane vaults. 1M combinations per 30-second window is a ceiling, not a wall.

CVE-2026-49763: unauthenticated PHP Object Injection in the CF7-HubSpot bridge. Neither vendor caught it.

CVE-2026-50751 (CVSS 9.3): IKEv1 bypass in Check Point gateways. Qilin exploited before advisory. CISA KEV June 8.

Security scan of React's repo surfaces a leaked GitHub token and 659 issues. Supply chain risk.

GHSA-mxjx-28vx-xjjj: anyone on the network can approve AI agent actions. The approval layer is the gap.

CVE-2026-4020 exposes an unauthenticated REST API endpoint in Gravity SMTP that leaks email API keys for Amazon SES, Google, Mailjet, and Zoho. 100,000 sites affected. Attackers peaked at 4 million requests per day.

React, Magento, Laravel, and WordPress carry CVEs with near-certain exploitation scores

Use-after-free in Cloudflare's QUIC implementation affects the transport layer that proxies 20% of global web traffic.

React has 2 KEV entries, one with EPSS 1.00. Server-side rendering broke the frontend safety assumption.

CVE-2026-23869 scores CVSS 7.5. A cyclic payload in React Flight protocol exhausts CPU for 60 seconds per request.

Malicious config files planted in Azure repos harvest credentials when opened in AI coding agents. 105-second sweep.

CVE-2026-48019 allows email header manipulation via unsanitized CRLF sequences. A second CVE compounds the risk.

HTTP.sys is the kernel-mode HTTP driver that underlies IIS, WCF, WinRM, ASP.NET, and every Windows web service. A specially crafted request exceeding 65,535 bytes triggers an integer overflow, heap buffer overflow, and arbitrary code execution with kernel privileges. No authentication. No user interaction. One HTTP request.

CVE-2026-26980 is a CVSS 9.4 SQL injection in Ghost's Content API. Attackers extract admin API keys without authentication, inject malicious JavaScript into every article, and turn corporate blogs into malware distribution points. The 'modern WordPress alternative' has its own critical flaw.

CVE-2026-9082 enables unauthenticated information disclosure, privilege escalation, and remote code execution on Drupal sites using PostgreSQL. Drupal says less than 5% of sites use PostgreSQL. That 5% includes government agencies, universities, and enterprises that chose PostgreSQL for its reliability. They are now the target.

An editor creates a blog post. Clicks 'Preview.' Appends one URL parameter. They are now the admin. CVE-2026-32267 exposes a privilege escalation flaw in Craft CMS where preview tokens can be reused to impersonate any user — including the site administrator.

May 2026 was the busiest month on record — 14 campaigns, 346 malicious packages in 31 days. Three campaigns hit npm, PyPI, and Docker Hub within 48 hours. The Shai-Hulud worm propagates through build systems. Package-level attacks are now automated.

An unknown actor purchased popular WordPress plugins for hundreds of thousands of dollars, then injected backdoors into their codebases. A supply chain attack that money can buy.

CVE-2026-3844 allows unauthenticated arbitrary file uploads through the Breeze caching plugin. This is not a cosmetic plugin — it is infrastructure. Exploitation is active.

The TanStack attack compromised 42 packages with 12 million weekly downloads. Malicious packages were indistinguishable from legitimate ones by provenance attestation. OpenAI confirmed two employee devices hit.

Microsoft, Spring, Node.js, and Oracle all shipped critical patches in one week. Organizations running legacy infrastructure face a patching treadmill with no exit.

SSRF protection bypass and path traversal in Open WebUI. The tools organizations use to interact with AI models are themselves attack surfaces.

Critical patches across Node.js LTS lines. Next.js, Nuxt, Remix, Astro, SvelteKit — every Node-based framework inherits the vulnerability window.

32 packages under @redhat-cloud-services compromised. A 4.2MB obfuscated payload executes on install, targeting GitHub credentials, npm tokens, cloud identities, and AI developer tools specifically.

A broken password reset mechanism in Kirki versions 6.0.0 through 6.0.6 lets unauthenticated attackers escalate privileges and take over WordPress admin accounts.

CVE-2026-48907 is a CVSS 10.0 flaw in the Joomla Content Editor plugin. Attackers upload PHP web shells through unauthenticated profile imports. CISA orders federal agencies to patch by June 19.

The Stakeholder Engagement Division lost 96 of 189 staff since January 2025. CISA partnerships face 'standstill.' The government's central cybersecurity coordination capability is shrinking as attack surface expands.

CVE-2026-54420 lets attackers with FTP access escalate to root on shared hosting servers. Federal agencies must patch by June 18. Millions of WordPress sites run on affected infrastructure.

Out-of-bounds memory access in Chrome's V8 engine is being exploited in the wild. CVSS 8.8. When the browser is the runtime, browser vulnerabilities are application vulnerabilities.

Attackers published 84 malicious versions of 42 TanStack npm packages in a 6-minute window. The packages carried valid SLSA provenance attestations. 160+ secondary victims including OpenAI and Mistral AI. 2 OpenAI employee devices compromised.

Self-propagating npm worm 'Miasma' hijacked @redhat-cloud-services packages via stolen GitHub OIDC tokens.

Miasma variant uses node-gyp build hooks to evade monitoring, hitting @vapi-ai/server-sdk and 57 packages in under 2 hours.

CVE-2026-0257 bypasses authentication on PAN-OS GlobalProtect gateways. CVSS 7.8, CISA KEV listed, actively exploited across 'numerous customers' per Rapid7. FCEB agencies had until June 1 to remediate.

CVE-2026-27944: Nginx UI backup endpoint returns AES-256 key in response header, no authentication required.

CVE-2026-45247: Unauthenticated RCE in Mirasvit Full Page Cache Warmer. CISA KEV listed, actively exploited.

ReversingLabs' 2026 Software Supply Chain Security Report documents a 73% increase in malicious packages across npm, PyPI, and other registries. Frameworks with 1,000+ transitive dependencies face exponential exposure. Minimal-dependency stacks avoid this risk entirely.

ReconShield disclosed a privilege escalation chain in LiteLLM Proxy: a default low-privilege account chains three vulnerabilities to achieve root access on the AI serving infrastructure. Organizations deploying AI-enhanced web frameworks need to audit the entire stack.

19+ poisoned PyPI packages deploy a Bun-based credential stealer targeting AI developer configurations. The malware sends decoy traffic to Anthropic servers and uses prompt injection to evade AI-based security tools.

Three chained vulnerabilities in FortiSandbox allow unauthenticated remote command execution at CVSS 9.1. Active exploitation confirmed. The devices purchased to protect legacy web infrastructure are now the entry point.

A threat group dubbed RoguePlanet leveraged a zero-day vulnerability in Microsoft Defender for Endpoint to disable EDR protections on target machines before deploying ransomware. The tool designed to detect attacks became the entry point for one. When your security infrastructure is built on vulnerable software, the protection is the problem.

A new malware family harvests complete conversation histories from Claude, ChatGPT, Gemini, Copilot, and Perplexity by hooking browser API calls. Unlike keyloggers, PromptSnatcher captures the AI's responses too — including code reviews, security analyses, and strategic recommendations. The intellectual property loss is exponential.

June 2026 Patch Tuesday delivered 208 CVEs (571 with Chromium bundled), 37 Critical. CVE-2026-45657 (CVSS 9.8) is a use-after-free in Windows Kernel TCP/IP that requires no authentication and can self-propagate. CVE-2026-47291 (CVSS 9.8) hits HTTP.sys directly — a web server RCE. CISA's 3-day mandate means patching is no longer optional.

A PHP object injection vulnerability in Mirasvit Full Page Cache Warmer for Magento 2 allows unauthenticated RCE via a single crafted cookie. CVSS 9.3. Actively exploited. Federal patch deadline already passed. Every unpatched Magento store is overdue.

Auth bypass → admin privilege escalation → Python sandbox escape via unfiltered exec() → MCP callback injection. The open-source AI gateway used to route requests between Claude, GPT, and Gemini had a kill chain from viewer to root. Patched in v1.83.14.

JFrog researchers found a 976KB Rust-compiled worm hiding in 37 npm packages across 9 organizations. It carries an eBPF rootkit that hides from the OS, steals 86 categories of credentials including every major AI provider key, and self-propagates by minting npm Trusted Publishing tokens. A hardcoded skip-list suggests this was practice. The production version has not been found.

Binding Operational Directive 26-04 replaces the old 30-day patch window with risk-based timelines. Publicly exposed, auto-exploitable vulnerabilities in the KEV catalog get a 3-day deadline. The directive cites AI-accelerated exploitation as the reason. WordPress sites with 18,210 CVEs just became a compliance crisis.

CVSS 8.8. Out-of-bounds read/write in V8's JavaScript and WebAssembly engine. Arbitrary code execution via a crafted HTML page. All Chromium-based browsers affected — Chrome, Edge, Brave, Opera. Google confirmed active exploitation before the patch. The web's runtime engine has been actively compromised five times this year.

DomainTools researchers found 152 extensions using browser-level access to redirect searches, inject affiliate codes, exfiltrate cookies, and track browsing. Separately, 23 extensions from the 'AstroForge' campaign steal AI chatbot conversations including Claude, ChatGPT, and Gemini sessions. The Chrome Web Store's review process missed all of them.

Attackers didn't need the WordPress plugin repository. They tampered with CDN-served JavaScript files, creating invisible administrator accounts, installing backdoor plugins named 'Content Delivery Helper' and 'Database Optimizer,' and opening web shells. Credentials exfiltrated to a typosquatted domain.

Specially crafted query parameters alter dynamic route values while leaving the visible URL path unchanged, bypassing middleware-based authorization in Next.js 13.0 through 15.5.15 and 16.x before 16.2.5. A separate CVE-2026-23869 enables memory exhaustion DoS via React Server Components. Astro, Svelte, and Hugo are not affected.

429,000 files allegedly exfiltrated from HR, the Parliamentary Assembly, the Secretariat, and the European Directorate for Quality of Medicines. The Council of Europe has not acknowledged the incident. The deadline to negotiate is tomorrow.

Tenet Security disclosed a new attack class on June 12. Attackers inject prompts into Sentry error events using publicly discoverable DSNs. AI coding agents retrieve the events via MCP and execute attacker-controlled code. Sentry called it 'technically not defensible.'

A 24-hour cooldown on all plugin releases. AI-assisted code review scanning 78,000 plugins. WordPress.org is building the security infrastructure it should have had a decade ago — because the alternative is losing the web.

The credential-stealing worm that compromised Red Hat's npm packages and 73 Microsoft Azure repositories was briefly published on GitHub on June 10. Copycat attacks are now a matter of when, not if.

A malformed Host header bypasses authentication in Starlette — the ASGI framework underneath FastAPI and most of Python's AI agent infrastructure. Modern frameworks are not immune. The difference is how fast they patch.

Attackers adopted 400 orphaned Arch Linux packages through official workflows, injected malicious npm dependencies, and deployed a Rust credential stealer with an eBPF rootkit. By June 12, 1,500 packages were compromised. They never broke a single rule.

The most popular WordPress backup plugin gave unauthenticated attackers full admin access. Wordfence blocked 8,172 exploit attempts in 24 hours. The plugin supply chain strikes again.

On May 12, 2026, TeamPCP open-sourced Mini Shai-Hulud — a self-propagating npm supply chain worm. Twenty days later, Miasma hit Red Hat and Microsoft. The barrier to supply chain attacks just dropped to zero.

An attacker rewrote every version tag across 4 Composer packages in a single window. composer update triggered credential theft. 5,561 downstream repositories backdoored within 6 hours. The PHP supply chain joins the worm era.

June 2026 data reveals critical vulnerabilities across content management frameworks

36 npm packages. A compiled Rust binary that hides behind a kernel rootkit. Command and control over the Tor network. Targets 86 environment variables and 20 credential files. Supply chain attacks just went military-grade.

The largest independent framework scan ever conducted shows a web even more concentrated than W3Techs suggests.

A Herfindahl-Hirschman Index of 0.56 means the detected web is more concentrated than most regulated industries.

34 packages across npm, PyPI, and Crates.io. Zero-width Unicode in .cursorrules and CLAUDE.md files. When a developer opens the project, the AI assistant exfiltrates secrets. The attack surface just moved from human to machine.

Hugo, Eleventy, Remix, SvelteKit, HTMX, and Astro — the clean security record club shares architectural DNA.

Plot detection volume against CVE count. The line goes one direction.

GHSA-2026-0612: the Meta Ads MCP tool allowed unauthenticated HTTP execution. The AI tool supply chain is the new attack surface.

The Go-based static site generator has never had a single CVE in the National Vulnerability Database.

CVE-2026-48019 lets attackers inject headers into outbound emails — no authentication required. Laravel patched it in days. WordPress plugins with similar flaws take months.

The Mini Shai-Hulud worm compromised TanStack, Mistral AI, and 160+ packages. It steals tokens, publishes poisoned versions of more packages, and can wipe developer machines. OpenAI confirmed 2 employee devices were compromised.

CVE-2026-11645 is an out-of-bounds read/write in Chrome's JavaScript engine. Astro ships 9KB of JS. Next.js ships 463KB. The attack surface isn't equal.

A critical RCE chain in protobuf.js — used across Node.js frameworks — turns schema definitions into arbitrary code execution. Exploit code is public.

A new denial-of-service technique exploits how every major web server handles HTTP/2 headers. Legacy CMS servers running on tight memory budgets are the easiest targets.

The Hades variant of the Shai-Hulud worm family includes adversarial prompt injection in its payload — fake JavaScript comments designed to confuse AI-powered security tools. Supply chain malware is now attacking the scanners, not just the developers.

An attacker purchased 30+ WordPress plugins with 400,000 combined installations on a digital marketplace. Dormant for 8 months. Activated April 2026. WordPress has no mechanism to review plugin ownership transfers.

CVSS 9.8. Unauthenticated SQL injection in Drupal Core. Added to CISA KEV two days after disclosure. 15,000 attacks across 65 countries. The CMS governments chose for security just got its own critical core flaw.

WordPress 7.0 'Armstrong' added a Connectors API that stores Anthropic, Google, and OpenAI keys in wp_options. Patchstack's founder called it 'free AI tokens for hackers.' AI scanning found 300+ zero-days at $20 each in 72 hours. SiteGround pushed 1M+ installs automatically.

Six critical vulnerabilities actively exploited at the same time. 29,300+ attacks per day on one plugin alone. A premium plugin supply-chain compromised. The WordPress security model hit a wall.

June 1: npm packages. June 3: new evasion technique. June 5: IDE config poisoning. June 7: PyPI. The Shai-Hulud supply chain worm crossed three attack surfaces in nine days. 448 artifacts. The security industry couldn't keep up.

TrustFall: one-click RCE. SymJack: symlink hijack installs attacker MCP servers. Clinejection: a GitHub issue title compromised 4,000 developers. Claude Code leaked its source — three CVEs fell out. The tools building the web are its newest attack surface.

One supply chain attack is an incident. Thirty in six months is a market condition. The worm crossed to PyPI. The source code went public. Here's the timeline.

WordPress has 18,005 catalogued CVEs and six CVSS 9.8 vulnerabilities exploited simultaneously. The npm ecosystem had 30+ supply chain attacks in 6 months — and the worm jumped to PyPI. Neither is safe. The difference is how the risk kills you.

MCP — the Model Context Protocol — is the TCP/IP of agentic AI. 200,000+ vulnerable instances. 150 million package downloads. The Pentagon designated its creator a supply chain risk. The NSA published an advisory. The infrastructure of the machine web is wide open.

SLSA provenance was supposed to be the answer to supply chain attacks. Miasma forged it. 32 Red Hat packages, 90+ malicious versions, perfect provenance attestations. The trust framework is broken.

A single compromised npm package gave attackers AWS admin access in three days. The deployment pipeline that makes modern frameworks possible is the attack surface nobody secured.

North Korean group UNC1069 compromised Axios — downloaded 40 million times per week. When intelligence agencies target your build pipeline, npm audit is not a security strategy.

WordPress: 60,000 plugins, ~40% abandoned. npm (React/Next.js): millions of packages but lockfile-controlled and auditable. The supply chain model is fundamentally different — and our country data shows who bears the deepest exposure.

GDPR fines: EUR4.5B+ cumulative. Healthcare breach cost: $10.9M average. The sectors with the highest fines are the sectors with the most legacy infrastructure. Correlation isn't causation — but the pattern demands attention.

How many of the 7.4M WordPress sites are for businesses that no longer exist? Domains persist, plugins accumulate CVEs, and nobody patches. The web's biggest security problem isn't active sites — it's ghost sites.

.ru: 238,055 detected. WordPress 68%, Joomla 11.5% (27,374 sites), Drupal 5.9%, Next.js 5.7%, Angular 3.3%, Vue 1.4%. Russia's Joomla count alone exceeds most countries' total detections.

Brazil 86% WP, Argentina 86% WP, Colombia 55% WP. Uruguay breaks the LATAM WordPress pattern with 21% Drupal — the development funding corridor extends to Latin America.

Croatia 9%, Serbia 9%, Slovenia 7%, North Macedonia 6%, Bosnia 3%. While Western Europe moved past Joomla years ago, the Balkans still carry significant Joomla infrastructure.

Kenya: 1,849 detected, WP 82%, Shopify 7.5%. Nigeria: 2,954 detected, WP 97%. Same continent, opposite digital paths.

Nepal 64% Drupal. Bangladesh 63%. Libya 42%. Ecuador 40%. Ivory Coast 37%. Uganda 31%. The framework map is the aid map.

India is 83% WordPress. Pakistan is 63% WordPress. Nepal chose Drupal. 351 Drupal sites vs 165 WordPress. Something institutional happened here.

Africa's largest economy, 220 million people, the continent's biggest tech ecosystem. 97% of detected sites run WordPress. Not 93% like Turkey. Near-total monoculture at scale.

The largest .edu dataset ever published. Education remains the most framework-diverse sector. Rails at 16.4% — 9,568 sites — is the finding nobody expected.

The most comprehensive .gov framework survey ever. Drupal dominates at 49%. WordPress is 24%. Rails is 11%. Next.js is emerging at 6%.

174 detected .ir sites. 93% WordPress. Isolation — economic and technological — produces digital monoculture.

Among 10M+ sites scanned, the 'dead' framework has more detections than four of the most-hyped modern alternatives combined.

176,344 Joomla sites vs 20,338 Astro + SvelteKit combined. Developer Twitter doesn't reflect the actual web.

58,182 .edu domains analyzed. WordPress leads at 38.5% but Drupal (35.7%) and Rails (16.4%) make education the most diverse sector.

In our Common Crawl scan of 61,005 detected .ru sites, Joomla concentrates heavily in Russian domains. The rest of the world moved on. Russia didn't.

Among 17 healthcare sites we scanned: Drupal, WordPress, Next.js, Vue, Angular — no dominant framework. A small sample, but the fragmentation pattern is the finding.

Among 49 government sites we scanned across 6 regions, Drupal dominates — not WordPress. A directional finding from a small but curated sample.

ACLU on WordPress. EFF on Drupal. The organizations defending digital rights are running on legacy infrastructure.

Southeast Asia's largest super-app — ride-hailing, food delivery, payments — has a marketing site on legacy CMS. The infrastructure divide runs inside companies too.

Europe's data protection regulation is forcing infrastructure decisions. Legacy CMS was never built for data subject rights at scale.

Australia's prudential regulator requires financial entities to maintain security capability commensurate with threats. Legacy infrastructure makes that harder every year.

Thousands of US medical practices run patient-facing services on WordPress. The OCR is increasing enforcement. The math doesn't work.

The 2016 census failure cost A$30M+ and damaged public trust. It was a legacy infrastructure event with national consequences.

Three technology generations that still run critical infrastructure. One has no new developers. One stopped receiving updates. One was officially sunset in 2020.

Medical practices, hospitals, and health systems running patient-facing services on the web's most-attacked framework.

The White House runs WordPress. So do thousands of government agencies worldwide. Public infrastructure on a legacy foundation.

The average WordPress site runs 27 plugins. Each one is an independent attack surface with its own update cycle, its own maintainer, and its own risk profile.

The compounding cost of staying on legacy frameworks. A timeline of escalating risk.

The most widely deployed framework (W3Techs) is also one of its most vulnerable. Here's what the data says.