ChainDrop worm crawls into npm supply chain, evades standard defenses

The feed covers a broad range of cybersecurity developments, including a major npm supply-chain worm poisoning hundreds of packages, ransomware and extortion incidents, government and supplier data breaches, exposed credentials and cloud keys, critical-infrastructure and industrial-control threats, AI-enabled attacks, hardware side channels, mobile-network abuse, DDoS campaigns, and security patching. The most operationally significant items are the ChainDrop/Shai-Hulud npm compromise, Microsoft vulnerabilities reportedly exploited by North Korean actors, Akira ransomware behavior, the Metaseb