Iran targets M365 accounts with password-spraying attacks

A batch of high-impact security incidents and active campaigns was reported: multiple supply‑chain compromises (notably a hijacked npm maintainer that slipped a RAT into two axios releases and PyPI packages tied to the Trivy breach including LiteLLM and Telnyx) have led to credential‑stealing malware and over 1,000 cloud environments infected. In parallel, a critical Citrix NetScaler vulnerability is being exploited in the wild days after disclosure, OpenAI patched a ChatGPT DNS side‑channel data‑exfiltration flaw, and suspected Iran‑linked actors conducted large password‑spraying campaigns vs