Microsoft shuts down illegal code-signing operation used by ransomware crims to mask their malware

A wave of high-impact incidents was reported: Microsoft disrupted an illegal code‑signing operation abused by ransomware groups; a US cyber‑defense agency left sensitive credentials and keys in a public GitHub repo; Drupal warned of an urgent, highly critical core patch; and multiple supply‑chain attacks (TanStack/npm, Shai‑Hulud) and GitHub account compromises (Grafana) contaminated developer tooling. Researchers also disclosed and observed active exploitation of multiple kernel vulnerabilities (including root‑level Linux flaws with public exploits such as Dirty Frag/Fragnesia), an actively‑p