Cyber Briefing: 2025.06.09

👉 What’s happening in cybersecurity today?

Malware hits npm, PyPI, and Salesforce via SOQL flaw, HelloTDS uses fake CAPTCHAs for mass infections. Chaos gang breaches Optima Tax, Sorbonne leaks staff data, Brazil city health services go offline. Trump rolls back Biden-era cyber rules, DOJ targets North Korean IT scam funds, and OpenAI bans state hackers from ChatGPT.

Listen to our podcast here ⏬

Welcome to Cyber Briefing, the newsletter that informs you about the latest cybersecurity advisories, alerts, incidents and news every weekday.

First time seeing this? Please subscribe

🚨 Cyber Alerts

1. Sabotage Theft Malware On npm And PyPI

Cybersecurity researchers have uncovered a new supply chain attack where malicious code was injected into over a dozen packages related to GlueStack, delivering a remote access trojan to users. In a separate incident on npm, two rogue packages were discovered that act as destructive wipers, designed to delete entire application directories in an…