Widely used Trivy scanner compromised in ongoing supply-chain attack

A broad set of high-impact security stories: multiple supply-chain compromises (including the widely used Trivy scanner, Notepad++, invisible/unicode-based attacks, and malicious packages targeting dYdX) are delivering backdoors and credential-stealing tooling, prompting secret rotations and urgent mitigations. Mobile and device threats are prominent — a powerful iPhone exploit/tool dubbed DarkSword is observed in the wild and CISA-listed iOS flaws remain active, while Wi‑Fi (AirSnitch), consumer security cameras, 14,000 infected routers, and IP‑KVM vulnerabilities expose large numbers of IoT/