AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks

Infosecurity Magazine feed covering July 21–31, 2026 cybersecurity developments, including nation-state activity, phishing and identity attacks, ransomware, malware and supply-chain campaigns, AI-enabled threats, industrial-system targeting, and major software vulnerabilities. Notable items include North Korean-linked npm attacks, Russian and Iranian campaigns, critical Chrome and Zimbra flaws, Hugging Face Diffusers code execution vulnerabilities, Linux and Ubuntu privilege escalation issues, TrickBot DNS tunneling, and attacks against healthcare, education, hospitality, and corporate sectors