A new Lua-based malware, called LucidRook, is being used in spear-phishing campaigns targeting non-governmental organizations ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.