Attempts to Exploit Exposed "Vite" Installs (CVE-2025-30208), (Thu, Apr 2nd)

SANS ISC diary highlights active exploitation attempts against exposed Vite installations (CVE-2025-30208). Ongoing TeamPCP supply-chain campaign updates (now at Update 005) report the first confirmed victim disclosure, documented post‑compromise cloud enumeration, continued dual ransomware activity, and narrowed attribution. Other items include a writeup on a fileless/malicious script using the Windows registry for persistence, an application‑control bypass technique enabling data exfiltration, DShield/Cowrie honeypot telemetry analysis, and routine ISC Stormcast podcast releases.