Care that you share
Summary: Cisco Talos announced it will retire outdated ClamAV signatures, cutting the "main.cvd" and "daily.cvd" databases roughly in half starting Dec. 16, 2025, with retired signatures restorable if old threats reappear. The same newsletter reports a new Sha1-Hulud supply chain campaign that compromised hundreds of npm packages uploaded between November 21 and 23, 2025, hitting packages from Zapier, ENS Domains, PostHog, and Postman, and cites FBI figures of $262 million stolen since January 2025 through bank support impersonation across more than 5,100 IC3 complaints.
Key Takeaway: The FBI's $262 million loss figure came from over 5,100 complaints since January 2025, and the Sha1-Hulud campaign reached popular packages from Zapier, PostHog, and Postman through npm preinstall credential theft - both routes into organizations that never touch a perimeter.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026