Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as “one of the largest package flooding incidents in open source registry history” – but with a twist. Instead of injecting credential-stealing code or ransomware into the packages, this one is a token farming campaign.… READ MORE HERE…

Crooks spoof US insurers, threaten bogus extradition to pry loose personal data and cash Chinese speakers in the US are being targeted as part of an aggressive health insurance scam campaign, the FBI warns.… READ MORE HERE…

Advisory updated as leading cybercrime crew opens up its target pool The US Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance to organizations on the Akira ransomware operation, which poses an imminent threat to critical sectors.… READ MORE HERE…

Cybercrime crew has ravaged multiple private organizations using Oracle EBS zero-day for months The UK’s National Health Service (NHS) is investigating claims of a cyberattack by extortion crew Clop.… READ MORE HERE…

Anthropic dubs this the first AI-orchestrated cyber snooping campaign Chinese cyber spies used Anthropic’s Claude Code AI tool to attempt digital break-ins at about 30 high-profile companies and government organizations – and the government-backed snoops “succeeded in a small number of cases,” according to a Thursday report from the AI company.… READ MORE HERE…