• Healthcare and energy sectors are prime targets for cyberattacks in 2026.
• North Korean hackers have published malicious npm packages targeting developers.
• Critical vulnerabilities in Hitachi Energy and Chargemap systems pose significant risks to infrastructure.

The North Korean Hacker Threat: npm Packages as a Vector

Cybersecurity researchers have identified a disturbing trend in the software development ecosystem, with North Korean hackers exploiting npm packages to distribute malicious payloads. These attacks, detailed in recent reports, highlight the vulnerabilities inherent in open-source supply chains.

Hitachi Energy Vulnerabilities Expose Critical Infrastructure Risks

The discovery of critical vulnerabilities in Hitachi Energy’s REBCO product line underscores the importance of securing industrial control systems (ICS). These flaws, which could allow attackers to gain unauthorized administrative access, highlight the risks posed to energy and healthcare infrastructure.

Chargemap Vulnerabilities Put Electric Vehicle Infrastructure at Risk

CISA has also warned about critical vulnerabilities in Chargemap’s infrastructure, which could allow attackers to gain unauthorized administrative control over charging stations or disrupt services through denial-of-service attacks.

CISA’s Known Exploited Vulnerabilities Catalog

In a recent update, CISA added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog:

Mitigating Risks in Healthcare Cybersecurity

Healthcare organizations must prioritize:

• Regular software updates and vulnerability management.
• Employee training on npm package risks.
• Implementing multi-factor authentication (MFA) for critical systems.