Cyber Security News

Hacking Editorial Brief — July 12, 2026

Supply Chain Compromise Hits JavaScript Development Tool

The npm package jscrambler version 8.14.0 was compromised to deliver a Rust-based infostealer targeting developer credentials during installation. The malicious package actively harvests cloud credentials from AWS, Azure, and Google Cloud platforms, representing a direct supply chain attack against development environments. The compromise affects a broad developer base relying on the legitimate code obfuscation tool, with attackers gaining access to cloud infrastructure credentials through trusted development dependencies.

Russian Intelligence Operation Expands Scope Across European Camera Networks

NATO intelligence agencies report that Russian state-backed hackers have accessed IP cameras and smart doorbells across Europe as part of an expanded surveillance operation tracking Western military shipments to Ukraine. The campaign extends beyond logistics routes to civilian infrastructure, exploiting internet-connected devices for persistent intelligence collection on allied military movements. South Korea separately disclosed that its military networks faced over 18,000 cyberattacks in the previous year, primarily through phishing campaigns using spoofed sender identities. Meanwhile, ShinyHunters confirmed a breach of Moody Bible Institute affecting 2.3 million records including donor, student, and alumni data, with the full dataset now leaked publicly.

Sources: The Hacker News · Военное дело · UkraNews · Korea Herald · eSecurity Planet