Amazon disrupted APT29’s June 2025 campaign exploiting Microsoft device code authentication, redirecting 10% of visitors to malicious domains.

Attacks on the NX build system and React packages highlight escalating threats to enterprise software development pipelines.