FBI Blames Contractor’s Missed Patch for ShinyHunters Breach

SecurityWeek roundup covering major cybersecurity developments, including breaches affecting government, healthcare, and national citizen registries; ShinyHunters activity; Ploutus ATM malware enforcement; an ongoing malicious npm supply-chain campaign; a Linux backdoor exploiting vulnerabilities and abusing STUN; macOS security-control changes; social-engineering defenses; and cybersecurity industry activity. The items collectively indicate significant risks from supply-chain compromise, unpatched systems, credentialed access abuse, malware exploitation, and large-scale data theft.