Google links axios supply chain attack to North Korean group

Multiple active threats and incidents: Google GTIG and other researchers attribute the Axios supply‑chain attack to North Korean actor UNC1069 (SentinelOne notes related macOS malware activity since 2023). CISA urged federal agencies to urgently patch a Citrix NetScaler vulnerability rated CVSS 9.3. A new criminal service called “Leak Bazaar” aims to monetize data stolen by ransomware groups. Separately, U.S. prosecutors indicted a Maryland man for a 2021 smart‑contract theft from Uranium Finance, and pro‑Russian actors have been impersonating Ukraine’s national cyber agency in phishing ops.