supply chain security
Cybersecurity & Risk
React2Shell at Scale: 766 Next.js Servers Breached in Credential Harvest
ALGERIATECH Editorial
April 13, 2026
Cisco Talos exposes UAT-10608's mass exploitation of CVE-2025-55182, harvesting AWS keys, Stripe secrets, and AI tokens from 766 hosts using NEXUS Listener.
Cybersecurity & Risk
FortiClient EMS Zero-Day: When Endpoint Security Becomes the Attack Surface
ALGERIATECH Editorial
April 6, 2026
⚡ Key Takeaways Fortinet’s FortiClient EMS suffered a critical zero-day (CVE-2026-35616, CVSS 9.1) that was actively exploited before patches existed,...
Cybersecurity & Risk
RoguePilot: How Hidden Instructions in GitHub Issues Let Attackers Hijack Repositories
ALGERIATECH Editorial
March 3, 2026
Orca Security discovered RoguePilot, a passive prompt injection that let hidden GitHub Issue instructions hijack Copilot to leak tokens and take over repositories.
