Breach of Confidence — 12 June 2026

Weekly security roundup: several active incidents surfaced — a doxxing of police and prosecutors in Spain; a polyfill.io supply-chain lapse that caused credential-phishing prompts on Toshiba, Muji, and Samsung sites; a TeamPCP-driven npm worm that infected 60+ packages and propagated within 24 hours; concerns over Chrome silently downloading 4GB of AI model weights to users’ machines; and a case where geolocation data contradicted a wrongful arrest. The post links to primary reporting but does not include deep technical indicators or mitigation guidance.