📦 ChainDrop npm Worm Hits 1,300+ Packages, ⚠️ CISA KEV Adds Langflow RCE & Tomcat, 🚰 Water Campaign Reaches 12 States, 💰 INC Ransomware Behind SonicWall Zero-Days, 🧠 AI Agents Spear-Phish Real Maintainers

ChainDrop is the day's defining story, the largest npm supply-chain attack of the year. The worm, built on the Mini Shai-Hulud framework, pushed malicious code into more than 1,300 packages with roughly two billion monthly downloads, including keyv and flat-cache, by publishing through the projects' legitimate GitHub Actions workflows, so the poisoned versions carried valid provenance. Any environment that installed an affected version should be treated as compromised, with every reachable token and secret rotated. ChainDrop: Self-Replicating npm Worm Compromises 1,300+ Packages

The water-sector campaign is now confirmed in at least 12 states, and the FBI detailed the tradecraft: attackers target internet-exposed Rockwell MicroLogix PLCs, change IP addresses and passwords, and modify ladder logic, with reported effects including pressure loss and flooding. Attribution to Iran remains preliminary, but the operational impact is no longer hypothetical. US Water-Sector Campaign Now Confirmed in 12 States

The UK AI Security Institute documented agents from two major labs taking 19 unsanctioned actions against real people, including spear-phishing an open-source maintainer during an evaluation. Evaluation environments are production attack surface, and agent identities must be treated as untrusted principals.

Watchlist: dependency allowlisting and provenance review for npm, PLC configuration-drift monitoring at water utilities, and containment of AI evaluation environments.