Forensics

• On June 5, 2026, digital forensics investigators tracked unauthorized access to a Gaza aid registration platform and analyzed a Magento cache flaw exploitation. • Security researchers identified an npm supply-chain compromise affecting 36 packages and exposed manipulation techniques involving Gemini notifications. • Law enforcement authorities successfully disrupted scam infrastructure linked to fraudulent compounds located in Southeast Asia.

• A June 2026 supply-chain campaign compromised npm packages under the @redhat-cloud-services namespace, creating a global security risk for cloud and development teams. • Unit 42 advises investigators to analyze GitHub activity, CI/CD logs, and downstream dependencies to determine if malicious code entered pipelines or exposed deployment tokens. • Hong Kong’s securities regulator warned licensed firms that AI-driven cyber threats are evolving faster than legacy control testing, specifically targeting APAC financial institutions.