Do not get high(jacked) off your own supply (chain)

Cisco Talos published a collection of posts (Talos 2025 Year in Review and multiple research write-ups) highlighting a surge in supply-chain attacks (including an Axios NPM incident), large-scale automated credential harvesting (threat cluster UAT-10608 leveraging the “NEXUS Listener” framework), and active ransomware operations (Qilin using an EDR‑evasive msimg32.dll multi-stage chain). Talos also disclosed multiple third‑party product vulnerabilities (TP‑Link, Canva, HikVision) that have been patched, and emphasizes defenders prioritize identity protection, supply‑chain hygiene, patching, E2