Triaging the Week 079

Supply chain attacks target NPM, vulnerabilities galore, and old malware adds new tricks in triaging the week 079.

Supply chain attacks target NPM, vulnerabilities galore, and old malware adds new tricks in triaging the week 079.

The high-profile attacks on Marks & Spencer, Co-op, and Harrods unraveled, AI flaws and misconfiguration run rampant, and Abacus dark web taken down in triaging the week 078.

Vulnerabilities found in Bluetooth, Cisco UCM, and Anthropic AI; Scattered Spider shift targets; and big busts for Europol and FBI in triaging the week 077.

New vulnerabilities, breaches, bypasses, and ClickFix attacks dominate the headlines in triaging the week 076.

Surge in Malware Targeting Crypto Devs, AI Deepfake Scams Hit Instagram, and DPRK Hackers Target Zoom in triaging the week 075.

ClickFix Attacks Target macOS and Booking.com Users, Supply Chain Attack Target Gluestack npm packages, and AI Vulnerability in Microsoft 365 Copilot in triaging the week 074.

Web browsers targeted with weak extensions and ClickFix attacks, DocuSign phishing emails, and Microsoft and CrowdStrike collaboration on threat actor naming in triaging the week 073.

Passwordless authentication is the future, DragonForce ransomware targets UK retailers, and Linux wiper hits the scene in triaging the week 072.

Critical vulnerabilities in SAP NetWeaver and Apple AirBorne, New InfoStealers, and ransomware gangs change branding model in triaging the week.

ClickFix attacks dominate headlines, MITRE ATT&CK v17 released, and major UK store hit by cyber attack in triaging the week 070.

CVE program in chaos, vulnerabilities hit Fortinet devices and Windows Task Scheduler, and coding scams trick developers in triaging the week 069.

Malicious Python packages and VSCode extensions, flaws in Fortinet and CrushFTP, and EC2 sites impacted by SSRF bugs in triaging the week 068.

North Korea expands fake IT workers scheme, QR code phishing is the hot new attack vector, and critical RCE is Apache Parquet drops in triaging the week 067.

Identity attack and InfoStealer surge in 2025, Apache Tomcat vulnerability and GitHub supply chain attack impact many, and Windows zero-day fuels APT attacks in triaging the week 066.

X hit by DDoS attack, 300+ critical infrastructure orgs targeted by Medusa ransomware, and AI-powered fake GitHub repos spread malware in triaging the week 065.