On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates (1.14.1 and 0.30.4) to download from command and control (C2) that Microsoft Threat Intelligence has attributed to…
Category: EN
Anthropic Claude Code Leak
IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship terminal-based AI coding agent) through a 59.8 MB JavaScript source map (.map) file bundled in the public npm package @anthropic-ai/claude-code version 2.1.88. A security researcher, Chaofan…
Apple Pushes Rare iOS 18 Patch for Devices at Risk from DarkSword Exploit
Apple pushes rare iOS 18 security patch to protect devices at risk from the DarkSword exploit, urging users to update or move to iOS 26 for stronger protection. This article has been indexed from Hackread – Cybersecurity News, Data Breaches,…
Pegasus Spyware: How to Detect, Prevent and Remove It
Pegasus is advanced spyware that can infect your devices just by being on an app or website. Learn how it works and what you can do to stop it. The post Pegasus Spyware: How to Detect, Prevent and Remove It…
Google fixes fourth actively exploited Chrome zero-day of 2026
Google fixed a new Chrome zero-day, tracked as CVE-2026-5281, in the WebGPU Dawn component that is already exploited in the wild. Google released Chrome updates fixing 21 vulnerabilities, including a new actively exploited zero-day tracked as CVE-2026-5281. The flaw is…
Autonomous SOC Explained: How Agentic Investigation Solves What Playbooks Couldn’t
SOCs face 4,484 alerts/day with 53% false positives. Learn why SOAR hit its ceiling and how the Autonomous SOC model changes security operations. The post Autonomous SOC Explained: How Agentic Investigation Solves What Playbooks Couldn’t appeared first on D3 Security.…
Frequently Asked Questions About the Axios npm Supply Chain Attack by North Korea-Nexus Threat Actor UNC1069
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access trojan to potentially millions of developer environments during a three-hour window on March 31. Key takeaways: The axios npm package, which has over…
Claude Mythos Wake-Up Call: What AI Vulnerability Discovery Means for Cyber Defense
Last week, the industry learned that Anthropic was developing Claude Capybara, also called Mythos, a powerful new AI model with substantially improved capabilities in vulnerability discovery, exploit development, and multi-step attack reasoning. While the details emerged through a data leak…
Amazon security boss: AI makes pentesting 40% more efficient
Plus: how to train your human AI interview Amazon has seen a 40 percent efficiency gain by using AI tools to pentest its products before and after launch, according to security chief CJ Moses.… This article has been indexed from…
Apple releases security fix for older iPhones and iPads to protect against DarkSword attacks
The security update protects a raft of older iPhones and iPads from attacks linked to leaked hacking tools called DarkSword. This article has been indexed from Security News | TechCrunch Read the original article: Apple releases security fix for older…
BSidesSLC 2025 – Closing Ceremonies — Highlights, Prizes & Sponsor Shoutouts
Author, Creator & Presenter: Bryce Kunz Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations’ YouTube Channel. Permalink The post BSidesSLC 2025 – Closing Ceremonies — Highlights, Prizes & Sponsor Shoutouts…
Survey Surfaces Greater CISO Appreciation for Scope of AI Threat
A survey of 500 CISOs working for U.S. organizations with more than 500 employees finds 31% acknowledging they have already seen unauthorized data exfiltration between software-as-a-service (SaaS) applications and AI tools and platforms. Conducted by the market research firm Censuswide…
Cyberattack hits Hasbro, impacting orders and shipping
The major U.S. toymaker and entertainment company is still working to assess if company data was stolen in the attack. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Cyberattack hits Hasbro, impacting orders…
Threat Brief: Widespread Impact of the Axios Supply Chain Attack
Unit 42 discusses the supply chain attack targeting Axios. Learn about the full attack chain, from the dropper to forensic cleanup. The post Threat Brief: Widespread Impact of the Axios Supply Chain Attack appeared first on Unit 42. This article…
Magecart Hackers Uses 100+ Domains to Hijack eStores Checkouts and Steal Card Data
A sophisticated and long-running Magecart campaign has been quietly operating for over 24 months, infecting e-commerce websites across at least 12 countries using more than 100 malicious domains to steal payment card data in real time and banks, not merchants,…
The AI Intelligence Layer for SIEM, Explained: What It Does, Why It Matters, and How to Evaluate One
Discover why 67% of security alerts go uninvestigated and how an AI intelligence layer closes the gap without replacing your SIEM. The post The AI Intelligence Layer for SIEM, Explained: What It Does, Why It Matters, and How to Evaluate…
Google Rolls Out Android Developer Verification to Curb Anonymous App Distribution
Google has formally begun rolling out a comprehensive verification framework for Android developers, a move aimed at tackling the persistent problem of malicious applications being distributed by actors who operate without revealing their identity. The company’s decision reflects growing…
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administration tool known as AGEWHEEZE. As part of the attacks, the threat…
Secure Access Tokens in Web Applications: A Practical Guide From the Field
I’ve spent years reviewing applications after security incidents, conducting code audits, and helping teams rebuild trust after token misuse exposed sensitive data. If there’s one pattern I keep seeing, it’s this: teams underestimate how important it is to secure access…
Planning a spring break trip? Don’t fall for these 7 travel scams
Spring break scams are out to ruin your vacation, but they don’t have to. With a little awareness and Avast Free Antivirus protecting your devices, you can hit the beach without handing criminals an opening. This article has been indexed…