Trellix Source Code Breach Highlights Growing Supply Chain Threats

A surge of high-impact incidents and emerging tactics dominated DarkReading's recent coverage: supply-chain compromises (Trellix source-code leak, TeamPCP-tainted SAP npm packages, GlassWorm VS Code extensions) are proliferating and enabling downstream malware/ransomware/wiper operations (Vect 2.0, Lotus). Active exploitation and proof‑of‑concept code surfaced for critical flaws (a cPanel authentication‑bypass with reported zero‑day activity; an unpatched 'PhantomRPC' Windows privilege‑escalation), while Microsoft Edge was shown to expose stored passwords in process memory to local admin-level