Tropic Trooper, a Chinese state-sponsored APT group also tracked as APT23, Earth Centaur, KeyBoy, and Pirate Panda, has been observed deploying AdaptixC2 command-and-control infrastructure through a supply chain attack involving trojanized SumatraPDF binaries and GitHub repositories.

Open-source frameworks now enable automated red-teaming of AI applications, allowing security teams to systematically identify vulnerabilities in machine learning models and AI-driven systems.

Researchers have identified malicious packages pgserve and automagik/genie in the npm registry, linked to the CanisterSprawl and CanisterWorm campaigns. These compromised developer tools represent a significant supply chain attack vector targeting software development environments.

Security researchers have identified a supply chain compromise affecting KICS, the open-source infrastructure-as-code scanning tool maintained by Checkmarx. Malicious Docker images and Visual Studio Code extensions have been injected into the distribution pipeline, potentially exposing developers and organizations to code execution risks.

Security researchers have identified a metadata leakage vulnerability in WhatsApp's call feature that exposes user information to attackers. This exposure is particularly concerning for professional service firms in regulated industries—medical practices, law firms, and accounting firms—that rely on WhatsApp for client communications.

Federal prosecutors have secured a guilty plea from a ransomware negotiator involved in the BlackCat ALPHV extortion operation, which has targeted hospitals, universities, and other critical infrastructure. This case demonstrates how ransomware gangs rely on specialized facilitators to extract payments from victims.