The keyv/cacheable npm worm changes the order of containmentVishing extortion shifts the control problem to personal phones…Atuin can preserve Linux shell evidence that standard history…Self-evolving agent skills create a trajectory-poisoning control gap
Monday flagship · Weekend decision brief
The keyv/cacheable npm worm changes the order of containment
A self-propagating package compromise reaches developer workstations and CI runners, while a token-validity watcher makes isolation and evidence preservation precede credential revocation.
Security.io Intelligence Desk · Monday, 10 August 2026
Executive consequence
Treat a match as a potential credential and publishing-identity compromise, not merely a dependency problem. The payload can execute through installation or repository-opening hooks, establish host persistence and trigger an attacker-controlled command when a stolen GitHub token is revoked.
Decision today
Isolate matched developer endpoints and CI runners without powering them off.
Read the full decision briefPrimary reporting: SANS Internet Storm Center · Wiz Research IOC repository · Socket Threat Research · Wiz Research
Decision intelligence, not a headline feed.Every edition ranks what security leaders should read first, assign today and monitor next.
Six-minute executive briefing
Security.io Daily Headlines
Five equally weighted stories: what happened and the leadership decision each creates.
UNC6671 callers use urgent passkey or MFA-enrolment pretexts on employees’ personal phones, directing targets to adversary-in-the-middle portals. Successful sessions support automated SaaS data access, password resets for non-SSO applications and deletion of security notifications.
Do today
Warn targeted staff that helpdesk teams do not conduct passkey enrolment through unsolicited personal calls.
Linux incident playbooks that collect only .bash_history or .zsh_history can miss richer Atuin evidence. The database records command context and can retain soft-deleted or write-ahead-log artefacts, but synchronised entries may originate on another host.
Do today
Add Atuin artefact discovery to Linux triage procedures.
The research demonstrates a control problem in agents that learn reusable skills from stored trajectories: apparently successful experience can become a poisoned instruction source.
Do today
Inventory agents that retain trajectories or generate reusable skills.
Scores are Security.io editorial ratings from 0–100 for the lead decision, based on package reach, credential access, response-order sensitivity and potential downstream propagation; they are not external measurements. Source: Security.io editorial scoring using the lead story’s validated source ledger.
Back page
Daily comic · Circuit Chuckles
A brief pause after the intelligence
Human in the Loop
Rusty turns human oversight of an AI agent into an extremely efficient rubber-stamp process.
