The LEGO Woodlands Mushrooms set is the first time the wildly popular Botanical collection has gone all in on a fungal theme. It looks amazing, so long as you have delicate enough fingers to put it together.
The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.
The CI/CD workflow weakness affects Microsoft’s Azure Sentinel, Google’s AI Agent Development Kit, Apache’s Doris analytics database, Cloudflare’s Workers SDK, and Python Software Foundation’s Black.