Supply-chain attack using invisible code hits GitHub and other repositories

A cluster of active, high-impact incidents and emerging threats across software supply chains, infrastructure, and consumer devices. Notable stories include a Unicode-based supply-chain attack affecting GitHub and other repositories; a destructive wiper that knocked Stryker's Windows network offline; ~14,000 Asus routers infected with resilient malware; a Notepad++ update-server compromise used to deliver backdoors; malicious packages that drained dYdX wallets; rapid exploitation of a Microsoft Office flaw by Russian-state actors; CISA adding three iOS flaws to its known-exploited list; and a新