Victoria’s Secret has delayed its Q1 earnings report due to a cyberattack that has blocked access to some systems. The attack did not materially disrupt Q1 results, but costs incurred may influence future financial performance. It’s suspected to be the work of cybercrime gang Scattered Spider. Retail brands including Harrods, Co-op, Marks & Spencer, Cartier, and Dior have also been targeted. It is considered a coordinated campaign against the retail sector.

Malicious PyPI Package Masquerades as Chimera Module to Steal AWS, CI/CD, and macOS Data
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository named chimera-sandbox-extensions, that steals sensitive developer-related information such as credentials, and