Red Hat removes tainted packages after software pipeline compromise

Multiple cybersecurity developments: Red Hat removed 32 tainted packages after a compromised GitHub account pushed malicious code to packages downloaded ~117,000 times per week, indicating a software supply‑chain compromise. Spanish authorities arrested a suspected hacker for large‑scale publication of sensitive personal data belonging to police, prosecutors and cyber officials. An inspector general report found NIST’s National Vulnerability Database backlog roughly doubled (from ~13k to >27k), undermining the NVD’s effectiveness and public trust. Separately, the NSA named new leaders for key,