North Korean threat actors have exploited npm packages and BeaverTail malware to target software developers. The attackers used 11 utility- and debugger-spoofing npm packages for remote access trojan loader deployment as part of the Contagious Interview campaign. The second-stage malware specifics are unclear, but Socket Security researchers noticed BeaverTail and InvisibleFerret repurposing. A separate analysis found BeaverTail malware spreading the Tropidoor backdoor for Windows.

European Commission launches consultation on strengthening healthcare cyber defenses, seeks input by Jun. 30
The European Commission has started a consultation on its January Action Plan, aiming to strengthen cybersecurity for healthcare providers and hospitals. This includes building strategies