[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foxWd_BuZ5XWVed3kus3U354hDbCQuLfNahqc9zcvV4U":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"0924b834-4635-4dde-b09e-d1720d03591e","OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found","ovhcloud-cli-compromised-via-github-release-swap-detonating-the-real-glassworm-l-840021","An attacker swapped the binaries on five OVHcloud CLI releases, stayed live for 94 minutes, and deleted the evidence. We rebuilt the exact attacker build, recovered the GlassWorm loader from an orphaned commit, and detonated the full chain in an isolated chamber. The replay shows that install.sh never exposed arm64 Linux, Homebrew was never a path in, and a single ovhcloud version command was enough to spot the malicious build.","An attacker compromised OVHcloud's CLI by swapping release binaries on GitHub, remaining undetected for 94 minutes and affecting approximately 250 downloads. The attacker used an OVHcloud contributor's GitHub account, with initial access traced back to March 2026. The compromised binaries contained a credential stealer, targeting AI agents, cloud CLIs, and sensitive configuration files.","OVHcloud CLI GitHub releases swapped with malware, impacting ~250 downloads.","https:\u002F\u002Fwww.stepsecurity.io\u002Fblog\u002Fovhcloud-cli-github-release-swap-glassworm","https:\u002F\u002Fcdn.prod.website-files.com\u002F673b71f0790aabf30bd30bf8\u002F6adc5f8d9d3fffc9ce4f7258_OVHcloud%20CLI%20Cover-selection.png","2026-10-24T07:50:47+00:00","2026-10-24T08:00:16.408504+00:00",9,[17,20,23],{"name":18,"type":19},"OVHcloud","vendor",{"name":21,"type":22},"ovhcloud-cli","product",{"name":24,"type":25},"HassenBF","threat_actor","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":26,"icon":28,"name":29,"slug":30},null,"Supply Chain","supply-chain",[32,34,39,44],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"url","https:\u002F\u002Fgithub.com\u002Fovh\u002Fovhcloud-cli\u002Freleases","Compromised GitHub releases for OVHcloud CLI",{"type":43,"value":55,"context":56},"GlassWorm loader","Malware recovered from the compromised OVHcloud CLI build",[18,21],{"controls":59,"vendors":142},[60,89,115],{"slug":61,"name":62,"problem":63,"products":64},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":90,"name":91,"problem":92,"products":93},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":111,"product_name":112,"url":113,"description":114},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"slug":116,"name":117,"problem":118,"products":119},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[120,126,134],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":121,"product_name":122,"url":124,"description":125},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":155},"ovhcloud-cli-poisoned-via-github-release-swap-stealing-credentials-for-94-minutes","OVHcloud CLI Poisoned via GitHub Release Swap, Stealing Credentials for 94 Minutes","An attacker who had compromised an OVHcloud contributor's GitHub account swapped legitimate CLI release binaries with malicious ones containing a credential stealer, remaining undetected for 94 minutes and infecting roughly 250 users. The root cause is a combination of weak account security on a trusted contributor's identity and an absence of binary integrity verification in the release pipeline. This matters because developers and AI agents implicitly trust official release assets, making a tampered binary a high-yield, low-noise attack vector. The 94-minute detection gap demonstrates that without automated release integrity monitoring, supply chain substitutions can achieve significant reach before any alert fires.",[148,149,150,151,152,153,154],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management","MITRE ATT&CK T1566: Phishing","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":156,"MITRE ATT&CK T1566: Phishing":157,"NIST SP 800-53 SI-2: Flaw Remediation":158,"CIS Control 17: Incident Response Management":159,"CIS Control 7: Continuous Vulnerability Management":160,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":161,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":162},"NIS2 mandates supply chain security measures for essential and important entities; the failure to protect the integrity of a published software artifact and the downstream impact on users is precisely the scenario this article is designed to prevent.","Initial account access traced back to March 2026 is consistent with credential phishing or session-token theft; this technique maps directly to ATT&CK T1566 and underscores the need for phishing-resistant authentication on developer accounts.","SI-2 requires organizations to identify, report, and correct information system flaws, which extends to ensuring software distributed to users is authentic and untampered—a control that would mandate checksum verification on every release.","The 94-minute detection gap highlights the absence of a pre-planned, automated incident response playbook for supply chain compromise events; a defined procedure would have triggered faster containment and user notification.","Release assets should be continuously validated for integrity; automated scanning of published binaries against known-good hashes would have flagged the swapped binary within the release pipeline itself.","This control requires organizations to manage vulnerabilities in their software supply chain; a formal process for securing the release pipeline and verifying artifact integrity would fall directly under its scope.","The attacker gained initial access through a compromised contributor account; enforcing phishing-resistant MFA and strong identity controls on privileged GitHub accounts would have blocked or significantly raised the bar for this takeover."]