Intelligence Hub

IronWorm, a Rust-written malware campaign, targets developers through the NPM supply chain to steal credentials. Threat actors reuse stolen credentials to propagate further across the software supply chain, similar to the Shai-Hulud campaign.

A Magecart campaign exploits Stripe's API infrastructure to host credit card-stealing malware and exfiltrate payment data from compromised checkout pages. The threat actors leverage legitimate payment infrastructure for malicious payload distribution and data harvesting.

The UN World Food Programme (WFP) disclosed a breach of its self-registration application (SRA) for Palestine, exposing personal data of approximately 600,000 Gaza households. This is a significant cybersecurity incident affecting vulnerable humanitarian aid beneficiaries.

A supply-chain attack compromised 36 packages on npm with IronWorm infostealer malware. The attack targets the Node.js ecosystem, potentially affecting developers and organizations using infected packages. Security teams are advised to audit dependencies and update to patched versions.

French-led joint investigation with Spain and Europol successfully dismantled a counterfeit document production facility in Alicante, Spain. Approximately 800 fraudulent identification documents were seized. Operation involved French National Police (Police Nationale/OLTIM) and Spanish National Police (Policía Nacional/UCRIF).