ChainDrop supply chain compromise: Anatomy of a self-propagating worm

Microsoft Security Blog RSS content covering a self-propagating worm distributed through more than 400 compromised npm packages, Midnight Blizzard credential-theft and malware-delivery activity targeting hospitality portals and travelers, ransomware disruption by Microsoft Defender, phishing and social-engineering trends, and broader Zero Trust, AI security, and incident-response guidance. The ChainDrop supply-chain compromise and CaptiveCrunch campaign represent the most significant active threats in the feed.