The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
The financially motivated group has been active since May 2025, impersonating Fortinet, Ivanti, Cisco, and other vendors to steal corporate credentials.