First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

A batch of high-impact security developments: law enforcement disrupted "First VPN," a criminal VPN used by ~25 ransomware groups; multiple active breaches and supply-chain compromises (GitHub internal repos via a poisoned Nx Console VS Code extension, Grafana source code via a TanStack npm attack); a massive automated GitHub campaign named Megalodon that injected malicious CI/CD workflows into >5,500 repositories; and Microsoft disrupted a malware-signing-as-a-service abuse of its artifact signing. Several high-severity and actively exploited vulnerabilities were highlighted (including Cisco