Weekly Digest — Issue #28

Issue #28 of the CosmicBytez Labs Weekly Digest highlights multiple high-risk incidents: the FakeGit supply-chain campaign (7,600 malicious GitHub repos, ~14M downloads) deploying SmartLoader/StealC; JADEPUFFER reusing Langflow access to deploy ENCFORGE ransomware that targets AI model files and datasets; Qilin/Agenda exploiting a critical PAN-OS GlobalProtect authentication bypass; a Hugging Face breach via an autonomous agent framework; and SonicWall zero-days exploited by UTA0533 — the bulletin urges immediate patching, audits, and isolation of AI infrastructure.