Open-Source Supply-Chain Attacks: Amazon says a DPRK-linked actor used social engineering to compromise trusted npm libraries (axios, debug, chalk, typo-crypto), turning routine updates into a fast route to many downstream systems. Cybercrime Meets State Ops: A separate roundup highlights how AI is increasingly being folded into nation-state hacking, while Blockaid reports crypto losses topping $1.1B in H1 2026, with North Korea-linked groups behind a large share of stolen funds. Russia–North Korea Tech & Logistics Link: A joint investigation reports Russia and North Korea are nearing completion of a road bridge that could function as a covert military logistics corridor, with satellite-evasion advantages over rail. Missile War Spillover: Reporting claims a North Korean missile was used in a Russian strike that killed a family near Kryvyi Rih, suggesting replenished missile stocks. Border Monitoring & Water Releases: South Korea’s Unification Ministry says it can track DPRK dam water releases using advanced monitoring, pushing back on claims of limited capability. China–DPRK Labor Flows: North Korea reportedly sent about 10,000 workers to China in a month, with tens of thousands more under contract, as local Chinese governments get more involved in paperwork. Cyber Defense Guidance: FBI-linked best practices for layered defense are reiterated for sectors like healthcare, emphasizing resilience against nation-state tactics.