Firefox now has a free built-in VPN with 50GB monthly data limit
2026-03-24T19:23:29Z•af6e5625d0e8e9da2b3c51466989f89e7b4bf1e8a76c9ca9cf32a773e2138535
access-brokerbreach-notificationchatgpt-librarydata-breachdockerfirefoxgithubidentityincident-responsekubernetesmfaopenaioutlookphishingphishing-as-a-serviceprivacyransomwaresupply-chainteampcptrivytycoon2favpnwiperyanluowangzero-trust
What happened
This feed reports multiple high-impact security incidents and notable product/security updates. Key threats include an active supply‑chain campaign by TeamPCP that has tainted Trivy-related artifacts and spread to Docker images and GitHub repos, and a separate TeamPCP campaign deploying an Iran‑targeted wiper against Kubernetes clusters. The Tycoon2FA phishing‑as‑a‑service platform has returned to prior activity levels after law‑enforcement disruption. Several organizations disclosed or are investigating breaches and data theft claims: Infinite Campus (K‑12 SIS), Crunchyroll (claimed ~6.8Muser
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- af6e5625d0e8e9da2b3c51466989f89e7b4bf1e8a76c9ca9cf32a773e2138535
- Enrichment time
- 2026-03-24T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.