Official CPU-Z And HWMonitor Installers Infected With Malware After Site Breach

The CPU-Z And HWMonitor installers being compromised is notable because a user could do everything correctly and still get pwned.
The Hacker News

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...