Today's feed follows attacks on the systems we trust most: developer packages, identity flows, password vaults, code sandboxes, ground-control software and even Defender itself.