iFood Confirms Data Breach Affecting 1.2 Million Users in Brazil

Multiple high-impact security incidents and campaigns reported: iFood confirmed a data breach affecting ~1.2 million Brazilian customers while forum posts claim larger theft; North Korean-linked Lazarus Group is conducting npm brandjacking supply-chain attacks to drop malware and capture credentials; Five Eyes warn of Chinese espionage using fake job ads to target military personnel. Other notable items: TA4922 (China-linked) deploying SilentRunLoader malware against UK/Europe payroll/tax targets; attackers abused Meta’s AI support bot to hijack Instagram accounts; multiple malware campaigns —