Crook hawks millions of records allegedly plundered from corporate Azure tenants

Security news digest covering major breaches, credential compromise, ransomware and extortion, software supply-chain attacks, cloud data exposure, zero-days, critical-infrastructure threats, AI-enabled attacks, and newly disclosed vulnerabilities. The most significant items include alleged theft from corporate Azure tenants, the ChainDrop npm worm affecting 444 packages, large-scale customer data dumps, attacks on a nuclear safety agency, and a Microsoft Patch Tuesday containing 421 vulnerabilities, including one reportedly exploited by North Korean actors.