Maintenance in progress

a single cycle surfaced at least three structurally distinct supply chain intrusions running simultaneously: the icarus group breached market intelligence platform klue via a forgotten credential, used stolen oauth tokens to query lastpass salesforce crm nearly 900 times, and exfiltrated data from eight downstream companies; separately, the shai-hulud miasma campaign compromised a legitimate npm maintainer account and deployed 23 malicious package versions via trusted publishing workflows; and google mandiant disclosed that a cisco catalyst sd-wan manager zero-day had been silently exploited for months before any patch, granting root-level persistent access to sophisticated threat actors. three independent trust-chain attacks appearing in a single 24-hour window is a statistical anomaly worth recording.

cybersecurity research and vendor disclosures, u.s.-based