Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Ars Technica security feed covering arrests linked to TeamPCP's large-scale supply-chain attacks, credential theft through compromised packages, actively exploited macOS and server-management vulnerabilities, Zoom and Microsoft Copilot attack techniques, browser fingerprinting, AI-agent misuse, LLM prompt-injection data exfiltration, phishing and account-takeover defenses, surveillance, and cybercrime policy. The most urgent items involve active exploitation, widespread supply-chain compromise, credential leakage, and vulnerabilities enabling remote device or server control.