China-Linked Breach of FBI Surveillance System Classified as “Major Incident”
Summary A suspected China-linked threat actor has breached an FBI surveillance system, potentially exposing the phone numbers of targets being actively monitored by the bureau. The FBI has classified the…
Second Fortinet FortiClient EMS Zero-Day in Weeks — CVE-2026-35616 Under Active Exploitation
Summary Fortinet has disclosed yet another zero-day vulnerability in its FortiClient Endpoint Management Server (EMS), tracked as CVE-2026-35616. The improper access control flaw affects FortiClient EMS versions 7.4.5 and 7.4.6…
Microsoft Commits $5.5 Billion to Singapore AI Infrastructure in Landmark Five-Year Deal
Summary Microsoft has announced a $5.5 billion investment in Singapore over five years to expand the nation’s AI infrastructure and capabilities. The deal, announced April 1, 2026, represents one of…
67% of US State Legislators Have Data Exposed on the Dark Web, Proton Investigation Reveals
Summary A new investigation by Proton, published April 1, 2026, found that 67% of US state legislators have had their data leaked on the dark web through breaches linked to…
Axios npm Package Hijacked in North Korea-Linked Supply Chain Attack — RAT Deployed to Millions
Summary The widely used JavaScript HTTP client Axios — with over 100 million weekly npm downloads — was compromised in a supply chain attack on March 30-31, 2026. Threat actors…
Google Patches Fourth Chrome Zero-Day of 2026 — CVE-2026-5281 Actively Exploited in the Wild
Summary Google has released an emergency Chrome update to patch CVE-2026-5281, a high-severity use-after-free vulnerability in Dawn, the open-source WebGPU implementation used in Chromium. The flaw allows remote code execution…
ShinyHunters Strike Again: European Commission Confirms 350GB Data Theft from Europa.eu
Summary The European Commission has confirmed a major cyberattack on its Europa.eu web platform, with the notorious extortion group ShinyHunters claiming responsibility. Detected on March 24, 2026, the breach targeted…
SANS Report: The Real Cybersecurity Crisis Is a Skills Gap, Not a Talent Shortage — and AI Is Rewriting the Rules
Summary The 2026 SANS | GIAC Cybersecurity Workforce Research Report, unveiled at RSAC 2026 on March 31, challenges the prevailing narrative around the cybersecurity talent shortage. Based on a survey…
Anthropic’s Claude Code Source Code Leaked via Misconfigured npm Package
Summary The full TypeScript source code of Anthropic’s proprietary Claude Code CLI tool was inadvertently exposed on March 31, 2026, through a misconfigured npm package. Security researcher Chaofan Shou discovered…
DOJ Dismantles Aisuru and Three Other Massive IoT Botnets Behind Record 30 Tbps DDoS Attacks
Summary The U.S. Department of Justice, working with Canadian and German authorities, announced the successful dismantlement of four major IoT botnets: Aisuru, Kimwolf, JackSkid, and Mossad. The operation targeted command-and-control…