Cybersecurity, AI, etc.
Summary A new investigation by Proton, published April 1, 2026, found that 67% of US state legislators have had their data leaked on the dark web through breaches linked to…
Summary The widely used JavaScript HTTP client Axios — with over 100 million weekly npm downloads — was compromised in a supply chain attack on March 30-31, 2026. Threat actors…
Summary Google has released an emergency Chrome update to patch CVE-2026-5281, a high-severity use-after-free vulnerability in Dawn, the open-source WebGPU implementation used in Chromium. The flaw allows remote code execution…
Summary The European Commission has confirmed a major cyberattack on its Europa.eu web platform, with the notorious extortion group ShinyHunters claiming responsibility. Detected on March 24, 2026, the breach targeted…
Summary The 2026 SANS | GIAC Cybersecurity Workforce Research Report, unveiled at RSAC 2026 on March 31, challenges the prevailing narrative around the cybersecurity talent shortage. Based on a survey…
Summary The full TypeScript source code of Anthropic’s proprietary Claude Code CLI tool was inadvertently exposed on March 31, 2026, through a misconfigured npm package. Security researcher Chaofan Shou discovered…
Summary The U.S. Department of Justice, working with Canadian and German authorities, announced the successful dismantlement of four major IoT botnets: Aisuru, Kimwolf, JackSkid, and Mossad. The operation targeted command-and-control…
Summary The cybercrime group ShinyHunters has claimed responsibility for a mass data theft campaign targeting Salesforce customers through misconfigured public-facing Experience Cloud sites. The group asserts it compromised approximately 100…
Summary INTERPOL has announced the results of Operation Synergia III, a massive global cybercrime crackdown that ran from July 2025 through January 2026 across 72 countries and territories. The operation…
A critical SQL injection vulnerability in Fortinet FortiClient Enterprise Management Server (EMS), tracked as CVE-2026-21643, has moved from theoretical threat to active exploitation. Threat intelligence firm Defused confirmed attackers began…