Supply Chain Attack
Compromised Injective Labs GitHub Repo Used to Publish Wallet-Key-Stealing npm Package
Another JavaScript-ecosystem SDK compromise with cryptocurrency-user implications — defender inventory work this week.
Threat Intelligence
Microsoft Details "GigaWiper," a Malware Family Combining Espionage and Destructive Capabilities
A new destructive-plus-espionage malware family lands on defenders' desks — detection-engineering review this week.
Cybercrime
Interpol Reports 5,800 Arrests Across 97 Countries in Global Cybercrime Crackdown
A scale-significant multi-country cybercrime disruption — law-enforcement coverage this week.
Supply Chain Attack
Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants
An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.
Nation-State Cyber Threats
Suspected China-Linked Actors Exploit Roundcube Webmail Flaws in University Espionage Campaign
A higher-education-sector espionage disclosure — sector-advisory work for university IT teams this week.
Ransomware
Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case
The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.
Cybercrime
FBI and Google Disrupt NetNut Residential-Proxy Network Spanning Two Million Devices
A scale-significant proxy-network takedown — law-enforcement coverage and defender awareness this week.
Threat Intelligence
Google Threat Intelligence Group Details Continued Disruption of Malicious Residential-Proxy Networks
Vendor-driven proxy-network disruption continues — defender teams review perimeter-detection posture this week.
Ransomware
FortiBleed-Linked Actors Reportedly Collaborating With INC and Lynx Ransomware Operations
Threat-cluster convergence between FortiBleed and two ransomware families — defender teams stay in credential-verification posture this week.
Threat Intelligence
Kaspersky Details Umbrij, a New ToddyCat Tool Targeting Corporate Gmail via OAuth Tokens
An APT-tooling disclosure with corporate-Gmail implications — defender teams review OAuth-token hygiene this week.
phishing
Microsoft and Trend Micro Document Blockchain-Abuse Phishing Against EU and Asia Hospitality
Two vendor-documented hospitality-sector phishing campaigns land the same week — sector-advisory work for hotel-industry defenders this week.
Microsoft 365
Huntress Documents 81M+ Azure CLI Password-Spray Attempts Against 78 Microsoft Accounts
A scale-significant Azure CLI credential-attack campaign — defender teams stay in account-hardening posture this week.