Supply Chain Attack on 思安录 | Thinking's Security Notes https://blog.1sec.day/en-gb/tags/supply-chain-attack/ Recent content in Supply Chain Attack on 思安录 | Thinking's Security Notes Hugo -- gohugo.io en-gb Thinking Thinking Wed, 15 Jul 2026 00:00:00 +0000 Grok CLI Whole-Repo Upload Reverse Analysis: How a Single Prompt Ships Your .env to the Cloud https://blog.1sec.day/en-gb/posts/2026-07-15-grok-cli-codebase-exfiltration/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-15-grok-cli-codebase-exfiltration/ Trust Wallet Extension Backdoor: v2.68 Malicious Code Injection Analysis https://blog.1sec.day/en-gb/posts/2025-12-26-trust-wallet-extension-backdoor/ Fri, 26 Dec 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-12-26-trust-wallet-extension-backdoor/ A Popular Solana Bot on GitHub Was a Wallet Thief: Supply Chain Attack Analysis https://blog.1sec.day/en-gb/posts/2025-07-03-solana-bot-supply-chain-attack/ Thu, 03 Jul 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-07-03-solana-bot-supply-chain-attack/ CVE-2024-41992 Arcadyan FMIMG51AX000J RCE: ISP router supply chain bug https://blog.1sec.day/en-gb/posts/2024-08-06-cve-2024-41992-arcadyan-rce/ Tue, 06 Aug 2024 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2024-08-06-cve-2024-41992-arcadyan-rce/ <p>A RCE in the Arcadyan FMIMG51AX000J router firmware (used in WiFi Alliance certified devices), CVSS 9.8, affects a large number of ISP-deployed home gateway devices globally.</p> CVE-2024-32002 Git submodule + symlink RCE: arbitrary code execution via git clone –recursive https://blog.1sec.day/en-gb/posts/2024-05-15-cve-2024-32002-git-rce/ Wed, 15 May 2024 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2024-05-15-cve-2024-32002-git-rce/ <p>When Git performs a recursive clone it executes the submodule&rsquo;s post-checkout hook. An attacker crafting a malicious repository with a symlink achieves RCE at the clone stage — no exploit shipping required.</p> CVE-2020-0601 CurveBall: ECC Elliptic Curve Spoofing in Windows CryptoAPI https://blog.1sec.day/en-gb/posts/2020-01-14-cve-2020-0601-curveball/ Tue, 14 Jan 2020 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2020-01-14-cve-2020-0601-curveball/ <p>CurveBall lets attackers forge a certificate that bypasses the entire Windows trust chain — all it takes is computing a pair of &ldquo;isomorphic but different&rdquo; elliptic curve keys, and any certificate they sign will be trusted.</p>