Ongoing supply-chain attack 'explicitly targeting' security, dev tools

A cluster of high-impact incidents and trends: an apparent supply‑chain campaign explicitly targeting security and developer tooling (Checkmarx repo exposure; Lapsus$ claims), multiple corporate breaches and data-leaks (Itron, Medtronic, ADT, Carnival, Biobank), and active extortion groups (ShinyHunters, Lapsus$). Government and vendor alarms include CISA/UK removal of the Firestarter backdoor from a federal network (Cisco-related compromise reported), a joint advisory on China-linked actors abusing compromised routers/IoT as proxy infrastructures, and research on FAST16 — a possible early-era