美国航空公司遭入侵，无印良品中断在线服务|一周特辑

美国航空旗下支线航空公司Envoy Air证实其Oracle E-Business Suite应用遭Clop勒索组织入侵，可能导致 部分商业信息及联系方式泄露。该公司以American Eagle品牌运营，虽独立运作但已深度集成至美航票务与客运网络。
The Hacker News

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

GlassWorm spread via 14 VS Code extensions; Solana + Google Calendar C2; stole credentials, drained 49 wallets.
Hackaday

This Week In Security: Court Orders, GlassWorm, TARmageddon, And It Was DNS

This week, a US federal court has ruled that NSO Group is no longer allowed to use Pegasus spyware against users of WhatsApp.