Russian hacker wanted by U.S. arrested in Spain

Forty-five malicious NPM and PyPI packages have been deployed by threat actors to facilitate extensive data theft operations as part of a campaign that commenced on Sept. 12, according to BleepingComputer.

Sixty thousand emails from U.S. State Department accounts were noted by a staffer working for Sen. Eric Schmitt, R-Mo., to have been exfiltrated by Chinese threat actors during the widespread compromise of Microsoft email accounts that commenced in May, according to Reuters.

Russian actors were behind a surge in an effort to block money transfers of Ukrainian war refugees, said Morgan Stanley’s Rachel Wilson at the InfoSec World 2023 conference.