News World That's Worth

Supply Chain Attack: 32 Red Hat npm Packages Infected with 'Shai-Hulud' Malware via GitHub Actions Exploit Cloud security firm Wiz has uncovered a sophisticated software supply chain attack targeting Red Hat . Investigators revealed that 32 malicious npm packages under Red Hat’s official @redhat-cloud-services scope had been compromised and injected with info-stealing malware. Red Hat’s security team has since moved swiftly to unpublish and remove nearly all affected packages from the public npm registry. The Payload: 'Shai-Hulud' Targets Cloud API Credentials The embedded malware family has been identified as Shai-Hulud , a notorious strain engineered specifically for credential harvesting. Once an infected npm package is bundled into a developer's project or an enterprise application, the malware activates to scan the local environment, targeting high-value cloud API keys, including access tokens for Google Cloud Platform (GCP) and Microsoft Azure . The Attack...

Red Hat Launches "Skills Repository" to Empower AI Agents with Enterprise IT Capabilities At a time when system administration is rapidly automating, Red Hat has announced the launch of a dedicated Skills Repository designed specifically for AI agents. This open-ecosystem directory allows organizations to equip their autonomous AI agents with specialized capabilities to monitor, diagnose, and troubleshoot Red Hat environments seamlessly. Pre-Built Intelligence for DevOps The repository introduces out-of-the-box functionalities targeted at reducing server downtime and speeding up resolution times. Key examples include: CVE Explainer: An agent skill that automatically fetches data from Red Hat’s security advisories, analyzes vulnerabilities, and delivers concise risk reports directly to system administrators. Red Hat Diagnostics: A dedicated skill optimized to scan system logs, pinpoint software anomalies, and provide remediation steps across various Red Hat enterprise solu...