Weekly security news roundupfrom @wired

Transcript

What happened in security news this week. A self replicating supply chain attack worm has compromised hundreds of open source software packages on the code repository no packet management or NPM used by developers of JavaScript. Dubbed Shai Halloud after the Freeman name for the monstrous sandworms in the sci fi novel Dune, the malware is designed to infect a system that uses one of those software packages, then hunt for more MPM credentials on the system no that it can corrupt another software package and continue to spread. China's dystopian best surveillance network has reportedly been largely built on US technologies, according to rank investigation by the Associated Press. The AP's reporters found evidence that the systems allowing officials to censor the Internet and crackdown on Uyghurs in the country's Xinjiang region appear to have been built by the help of American companies, including IBM, Dell, Cisco, Intel, Nvidia, Oracle, Microsoft, Thermo Fisher, Motorola, Amazon Web Services, Western Digital, and HP. Scattered Spider, a rare hacking and extortion cybercriminal gang based largely in Better countries, has for years unleashed a trail of chaos across the Internet, hitting targets from MGM Resorts and Caesars Palace to to the Marks and Spencer grocery chain in The UK. Now two alleged members of that notorious group have been arrested and charged in The UK. A 19 year old and an 18 year old, both charged with hacking the transport for London transit system, reportedly inflicting more than $50,000,000 of damage among other targets.