Malware crew TeamPCP open-sources its Shai-Hulud worm on GitHub

Batch of high-impact security stories: malware crew ‘TeamPCP’ publicly released its Shai‑Hulud worm on GitHub and has been tied to Jenkins-plugin sabotage; a fast supply‑chain cache‑poisoning attack pushed 84 malicious TanStack npm versions with credential‑theft and disk‑wiping payloads; major Patch Tuesday included ~30 critical Microsoft CVEs; Foxconn confirmed a cyberattack with alleged theft of Apple/NVIDIA files; active exploitation reported for several Linux issues (CopyFail, Dirty Frag) and a critical cPanel flaw; ShinyHunters and other extortion actors continue breaching organisations;톱