Welcome back! This month we bring you the latest in cloud security - supply chain attacks, exclusive data, and critical vulnerabilities.
Throughout June 2026, Wiz Research tracked TeamPCP as it expanded its supply chain operations across the open source ecosystem, compromising npm packages, GitHub repositories, GitHub Actions, and other software distribution artifacts. The group pivoted from the Mini Shai-Hulud campaign to the Miasma campaign, which derives from the Mini Shai-Hulud worm.
✨Highlights
Continued TeamPCP Activity in New Miasma Campaign
Throughout June 2026, Wiz Research tracked TeamPCP as it expanded its supply chain operations across the open source ecosystem, compromising npm packages, GitHub repositories, GitHub Actions, and other software distribution artifacts. The group pivoted from the Mini Shai-Hulud campaign to the Miasma campaign, starting with a large-scale compromise of the `@redhat-cloud-services` npm namespace. In this campaign attackers abused a compromised GitHub account to publish backdoored packages under a trusted identity. The malware, derived from TeamPCP's open-sourced Mini Shai-Hulud worm, targeted developer credentials, CI/CD secrets, and cloud identities while introducing enhanced propagation capabilities.
Over the following weeks, the campaign evolved from package trojanization to large-scale repository compromises and novel build-chain abuse, including malicious `binding.gyp` files that execute code through `node-gyp` during package installation, bypassing many traditional npm security controls. TeamPCP also targeted repositories associated with major organizations, including Microsoft and Red Hat, demonstrating an increasing focus on software supply chains and developer infrastructure as a scalable malware distribution vector.
Learn more in our blog https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages
🐞 High Profile Vulnerabilities
HTTP/2 Bomb Denial-of-Service Vulnerability Affecting Major Web Servers
A remote denial-of-service vulnerability, dubbed "HTTP/2 Bomb," affects default HTTP/2 configurations of NGINX, Apache httpd, Envoy, Microsoft IIS, and Cloudflare Pingora. The attack chains HPACK compression amplification with HTTP/2 flow-control stalling to exhaust server memory, allowing a single client to render a vulnerable server unresponsive within seconds. The flaw is tracked as CVE-2026-49975 for Apache httpd and as CVE-2026-47774 for Envoy. Public proof-of-concept code is available.
According to Wiz data, 73% of cloud environments have resources vulnerable to this vulnerability.
Learn more here https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb
Critical Check Point VPN Authentication Bypass
Check Point has disclosed a critical authentication bypass vulnerability, CVE-2026-50751, affecting Remote Access VPN, Mobile Access/SSL VPN, and Spark Firewall deployments configured to use the deprecated IKEv1 protocol. The flaw allows unauthenticated attackers to establish VPN sessions without valid user credentials under specific configurations. Check Point has confirmed active exploitation in the wild, with attacks observed since at least May 2026.
Learn more here https://www.rapid7.com/blog/post/etr-critical-check-point-vpn-zero-day-exploited-in-the-wild-cve-2026-50751/
ITScape: KVM/ARM64 Guest-to-Host Escape Enables Host Kernel Code Execution
A critical vulnerability, tracked as CVE-2026-46316 and dubbed "ITScape," affects the ARM64 implementation of the Linux Kernel-based Virtual Machine (KVM). The flaw allows an attacker with root privileges inside a guest virtual machine to escape the guest environment and execute arbitrary code on the host with kernel-level privileges. Successful exploitation requires root-level privileges within the guest operating system, as the attack relies on performing privileged GIC/ITS memory-mapped I/O operations.
According to Wiz data, 71% of cloud environments have resources vulnerable to this vulnerability.
Learn more here https://github.com/V4bel/ITScape
Critical Authentication Bypass Vulnerability in LiteLLM
A critical authentication bypass vulnerability (CVE-2026-49468) has been disclosed in LiteLLM versions prior to 1.84.0. The flaw stems from improper handling of Host headers within the authentication layer, allowing an unauthenticated attacker to potentially access protected management endpoints under specific deployment conditions. Exploitation requires the ability to send crafted HTTP requests directly to a vulnerable LiteLLM proxy that is not protected by upstream Host header validation mechanisms.
According to Wiz data, 39% of cloud environments have resources vulnerable to this vulnerability.
Learn more here https://github.com/advisories/GHSA-4xpc-pv4p-pm3w
🔓Security incidents & campaigns
ServiceNow Unauthenticated Access Incident
ServiceNow disclosed that it applied a security update on June 5, 2026, to address an issue that could allow an unauthenticated user, under certain circumstances, to gain greater access than intended within customer instances. The company observed anomalous activity and confirmed that successful queries against instance tables occurred for a subset of customers. While no CVE has been assigned at the time of writing, public discourse suggests the issue may have been actively exploited prior to remediation.
Mastra Packages Trojanized with Malicious Dependency
On June 17, 2026, the open-source AI framework Mastra suffered a supply chain compromise when attackers breached a maintainer's npm account and injected a malicious dependency, easy-day-js, into 116 packages over a 27-minute window. Rather than altering Mastra's legitimate source code directly, the threat actor—attributed by Microsoft to the North Korean state-sponsored group Sapphire Sleet (the same group behind the March 2026 Axios compromise)—used a typosquatted version of the popular dayjs library to execute an obfuscated postinstall hook during npm install. This loader disabled TLS certificate validation to quietly deploy a cross-platform infostealer that establishes persistence on Windows, macOS, and Linux systems while harvesting browser data and credentials from over 160 cryptocurrency wallet extensions.
Learn more here https://www.endorlabs.com/learn/mastra-npm-org-compromised-multiple-packages-trojanized-to-drop-a-remote-payload-via-easy-day-js
Klue Supply Chain Breach Leads to Salesforce Data Exfiltration
A supply chain compromise involving the platform Klue has resulted in the theft of customer data from multiple organizations through abused Salesforce integrations. Threat actors compromised Klue infrastructure, harvested OAuth credentials used by customer integrations, and leveraged those credentials to access and exfiltrate CRM data from affected organizations.
Learn more here https://www.huntress.com/blog/klue-breach-investigation
Cryptojacking Campaign Targeting K8s Clusters
Researchers identified a campaign leveraging the Realm C2 framework that has compromised thousands of Linux hosts between June 13-23, 2026, with a primary focus on large managed Kubernetes clusters. The attackers exploited vulnerabilities in Argo Workflows and Gogs to gain initial access, then deployed cryptominers and used stolen Kubernetes service account tokens to spread laterally across over 300 additional nodes via privileged container escape. Organizations running Argo Workflows or Gogs should patch immediately and check for indicators of compromise.
Learn more here https://www.rapid7.com/blog/post/ve-authenticated-rce-via-argument-injection-gogs-unfixed/
Hold on to your headphones!
Tune in to "Crying Out Cloud", our monthly roundup of cloud security news podcast! Hosted by the talented duo Eden Naftali and Amitai Cohen 👏
Listen on Spotify and Apple Podcasts.