Supply-chain attack using invisible code hits GitHub and other repositories

A cluster of active, high-impact incidents and trends: attackers are exploiting supply-chain mechanisms (including invisible Unicode in code and compromised updaters like Notepad++) and targeting popular projects and package ecosystems (malicious packages for dYdX). A destructive wiper has taken down Stryker's Windows environment, tens of thousands of routers (mostly Asus) are infected with resilient malware, and Russian-state actors quickly weaponized an urgent Microsoft Office flaw. CISA added multiple iOS flaws to its Known Exploited Vulnerabilities list. New technical threats include an Wi