Get tomorrow's brief in your inbox
Today: ChainDrop worm infiltrates npm supply chain with evasion tactics that bypass standard defenses. CRPx0 ransomware group escalates to data sales after 47 victims refused payment demands. Election software vendor in Wake County reports possible cyberattack exposing poll worker data.
CRPx0 Escalates to Data Sales After Failed Extortion
CRPx0 ransomware group launched leak sites on both clearnet and dark web on August 7, listing 47 victims who refused to pay ransom demands. The group gained attention in July for distributing malware through fake OnlyFans account offers. Victims who did not pay within the deadline now have their stolen data listed for sale.
ChainDrop Worm Compromises npm Supply Chain
ChainDrop worm has infiltrated the npm package ecosystem using techniques that evade standard security defenses. The attack targets the JavaScript supply chain, affecting developers and organizations that rely on npm packages for application dependencies.
Wake County Election Software Vendor Reports Possible Cyberattack
A software vendor used by Wake County Board of Elections in North Carolina reported a possible cyberattack that exposed poll worker information. The county has suspended use of the vendor's software. No evidence indicates that voting machines, ballots, voter registration records, or vote counting systems were affected.
CISA Releases New K-12 Cybersecurity Resources
CISA published new cybersecurity guidance and resources for K-12 schools and districts. The education sector continues to be targeted due to weak security controls and limited IT budgets. Reports indicate mixed trends, with some data showing ransomware attacks down in the first half of 2026, while schools remain a frequent target.
UK ICO Reprimands ACRO Criminal Records Office After Breach
The UK Information Commissioner issued a reprimand to ACRO Criminal Records Office for violating UK GDPR Articles 32(1), 32(1)(b), and 32(1)(d) related to security of processing. ACRO provides police certificates, international child protection certificates, and subject access request processing. The breach involved failures in security measures.
Sogang University Breach Exposes 180,000 Accounts
Sogang University in South Korea confirmed a cyberattack that exposed personal information for approximately 180,000 students, alumni, and staff. The breach affected integrated login account data following an attack by an unidentified external party.
Today's stories highlight supply chain attacks targeting development infrastructure and continued ransomware group evolution from encryption-only to data theft and sales. Election infrastructure remains a target as the 2026 cycle approaches, while educational institutions face persistent threats due to resource constraints.