U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

This feed aggregates multiple high-impact security developments: a U.S. government entity reportedly paid ~$1M to an extortion group calling itself Kairos; numerous active and disclosed vulnerabilities (including a Linux local privilege-escalation Bad Epoll bug and a SharePoint RCE added to CISA KEV); widespread supply-chain abuse via malicious packages and compromised maintainer accounts (npm, Packagist, Go, Chrome extensions) attributed to North Korea-linked campaigns; seven unpatched FatFs flaws affecting millions of embedded devices; and new malware/operations (Avalon/CrownX, ChocoPoC, Pam