Cyber Bites - 30th May 2025

* Dozens of Malicious NPM Packages Discovered Harvesting System and Network Intelligence* TikTok Becomes New Vector for ClickFix Malware Campaign Targeting User Credentials* Australian Cyber Agency Warns of Russian GRU Targeting Western Logistics and Tech Companies* Apple Blocks Record $9 Billion in Fraudulent Transactions Across Five-Year Security Crackdownhttps://socket.dev/blog/60-malicious-npm-packages-leak-network-and-host-datahttps://www.trendmicro.com/en_us/research/25/e/tiktok-videos-infostealers.htmlhttps://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/russian-gru-targeting-western-logistics-entities-and-technology-companieshttps://www.apple.com/newsroom/2025/05/the-app-store-prevented-more-than-9-billion-usd-in-fraudulent-transactions/ This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit edwinkwan.substack.com