Hacker News Reader

Have any of these companies disclosed the actual vulnerabilities used to gain access to their systems?

No. Which may mean they don't know.

the recent CVE making any non-patched TCP exposed linux server RCE-root-able seems like a good stretch to me.

But could also be any of the recent supply chain attacks hitting a dev too i guess

Northflank mentioned they patched CVE-2026-98432. This appears to be similar, though not confirmed by trigger.dev yet