Sysdig Security Briefing: September 2025

September’s threat roundup details large-scale supply-chain compromises in the NPM ecosystem (multiple popular packages and ~200 packages infected by a worm), a cookie‑stealing malicious package (Fezbox), the discovery of ZynorRAT (Go-based cross‑platform malware), and active high‑impact exploits and vulnerabilities (DDR5 bit‑flipping, Android/Chrome zero‑days, Cisco flaws), emphasizing ongoing real‑world exploitation and the need for dependency auditing, detection, and rapid response.