Aug 21, 2025
1 new incident, 1 with updates.
Started
- ClosedCriticalPatched
Apple iOS, iPadOS, and macOS: iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. Added to CISA KEV on 2025-08-21.
Apple iOS, iPadOS, and macOSClosed Aug 21, 2025
Updated
- ClosedCriticalPatched
s1ngularity: malicious Nx releases used AI CLIs to hunt secrets, 5,500+ private repos exposed
Attackers abused a GitHub Actions injection bug in nrwl/nx to steal its npm token and published malicious nx and @nx/* versions for about four hours. The postinstall script used local AI CLIs (Claude, Gemini, Q) to find secrets and pushed them to public s1ngularity-repository repos. A second phase used stolen GitHub tokens to make 5,500+ private repos public.
nx and @nx/* npm packagesClosed Aug 29, 2025
