⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

This newsletter summarizes a broad set of active cyber threats and security developments: a high-impact supply-chain compromise of the Trivy scanner that distributed credential-stealing malware and an ensuing worm, law‑enforcement takedowns of massive Mirai-derived IoT botnets, rapid in-the-wild exploitation of newly disclosed critical vulnerabilities (including zero-day use by ransomware actors), discovery of mobile and browser infostealers (Perseus, VoidStealer), exposed open directories leaking APT tooling and stolen data, and multiple trending CVEs that require urgent patching—emphasizing the persistent gap between disclosure, detection, and remediation.